Keplr wallets hit by Web3Auth social-login flaw; ~$1M stolen, ~$6M moved to recovery address - 𝕏/@GoPlusSecurity

First reported Nov 9, 2026, 08:53 UTC

Source reports

Keplr wallets hit by Web3Auth social-login flaw; ~$1M stolen, ~$6M moved to recovery address - 𝕏/@GoPlusSecurity 🔗 Discord · Leviathan · Source 🗺️ Wallet 🕵️ @Danicjade via 𝕏 — Закрепи.sender, Nov 9, 2026, 08:53 UTC
Keplr wallets hit by Web3Auth social-login flaw; ~$1M stolen, ~$6M moved to recovery address - 𝕏/@GoPlusSecurity 🔗 Discord · Leviathan · Source 🗺️ Wallet 🕵️ @Danicjade via 𝕏 — Rickler Feed, Nov 9, 2026, 08:53 UTC
Web3Auth Frontruns Hackers, Saves $5.6M on Keplr A flaw in Consensys-owned Web3Auth exposed keys of Keplr wallets with Google or Apple login. Web3Auth frontran the attacker and swept them first, into 12 addresses holding ~$5.6M. The ~$6M pulled from 44,000+ wallets and first… — Rickler Feed, Nov 9, 2026, 11:40 UTC

Excerpts are quoted from the linked sources, which own their text.