Web3Auth breach exposes Keplr wallets; Bitquery estimates $6M drained
In brief
- Web3Auth confirmed an infrastructure flaw compromised certain Keplr-integrated embedded wallets, especially those using Google or Apple logins.
- Bitquery estimates at least $6 million drained from more than 44,000 wallets.
- Affected wallets span eight Cosmos networks, including Cosmos Hub, Osmosis, Celestia and Injective.
- Trust Wallet and MetaMask representatives said they've seen no impact on their users.
- Impact on other third-party Web3Auth integrations remains unconfirmed.
What Web3Auth confirmed
Web3Auth confirmed a security issue in its infrastructure that compromised certain embedded wallets integrated with Keplr. Accounts created through Google or Apple login were the main exposure, according to the company's confirmation as reported by U.Today.
The response so far has been defensive. Web3Auth suspended its embedded wallet service and is working to recover vulnerable assets, and the incident led to emergency service suspensions and recovery efforts (U.Today reported that investigations and protocol patches were still being released more than 24 hours after the discovery).
Keplr's message to users was blunt: don't deposit into compromised accounts.
How big is it?
Bitquery estimates that attackers drained at least $6 million from more than 44,000 wallets. It's an estimate from a blockchain analytics firm, not a confirmed total.
Those wallets are spread across eight Cosmos ecosystem networks. Cosmos Hub, Osmosis, Celestia and Injective are among them.
Eight chains, one infrastructure provider.
Who says they're unaffected
So who's actually exposed? Trust Wallet representative Felix said Trust Wallet has been unaffected, and MetaMask stated there's no evidence of affected users, according to U.Today.
That doesn't settle the question for everyone else, though. The impact on other third-party integrations hasn't been confirmed yet, per U.Today, so the list of products touched by the Web3Auth breach isn't final, and users of other apps built on its embedded wallets don't have an all-clear from these two statements.
Frequently asked questions
Was Trust Wallet affected by the Web3Auth exploit?
Trust Wallet representative Felix said Trust Wallet has been unaffected, according to U.Today. MetaMask separately stated there was no evidence of affected users. The impact on other third-party integrations hasn't been confirmed yet.
How much was drained in the Web3Auth Keplr breach?
Blockchain analytics firm Bitquery estimates that attackers drained at least $6 million from more than 44,000 wallets. That's an estimate rather than a confirmed total. The wallets are spread across eight Cosmos ecosystem networks, including Cosmos Hub, Osmosis, Celestia and Injective.
Which Keplr accounts were compromised by the Web3Auth issue?
Web3Auth confirmed that a security issue in its infrastructure compromised certain embedded wallets integrated with Keplr, especially accounts created through Google or Apple login. Keplr warned users against depositing into compromised accounts, and Web3Auth suspended its embedded wallet service while it works on recovering vulnerable assets.
