Hacking News
Bitquery Traces $6.01M Theft to Keplr Wallets Created with Google and Apple Logins
Blockchain analytics firm Bitquery traced a theft of at least $6.01 million from Keplr wallets to unauthorized transactions involving social-login accounts. The losses occurred over November 6-7, 2026, and were linked to private keys handled by third-party provider Web3Auth. Bitquery identified roughly 44,700 distinct wallets affected, with the Cosmos Hub taking the biggest hit, losing approximately $3.5 million. The breach, attributed to a security vulnerability in Web3Auth, affected an estimated 20% of accounts created using social logins.