Web3Auth Exploit Doesn't Affect Trust Wallet: Products That Might be Affected
A security breach at Web3Auth has compromised private keys of certain Keplr wallets, with attackers draining at least $6 million from over 44,000 wallets across eight Cosmos ecosystem networks.
The crypto industry is dealing with another security turmoil as a breach at Web3Auth, the wallet authentication infrastructure owned by Consensys, has exposed private keys of certain Keplr wallets. The November 7 incident led to emergency service suspensions and recovery efforts, which could add pressure to an already fragile crypto market.
Web3Auth confirmed that a security issue in its infrastructure had compromised certain embedded wallets integrated with Keplr, especially accounts created through Google or Apple login. Bitquery estimates that attackers drained at least $6 million from more than 44,000 wallets across eight Cosmos ecosystem networks, including Cosmos Hub, Osmosis, Celestia and Injective.
Industry Response
Keplr warned users from depositing into compromised accounts and Web3Auth suspended embedded wallet service, actively working on recovery of vulnerable assets. MetaMask stated there is no evidence of affected users, though the situation remains under control.
Trust Wallet has been unaffected
Broader Context
The incident comes amid a series of large hacks in the crypto industry. On October 29, Binance reportedly suffered a security breach involving around $6.3 billion, while Bitget was hit by an exploit estimated at $387.5 million in September. Earlier in 2026, KelpDAO lost around $290 million after an exploit involving cross-chain infrastructure.
DeFi protocols, wallet infrastructures, and smart contracts remain vulnerable targets. While there's no proven link between the Web3Auth exploit and declines on the market as a whole, investigations and rapid protocol patches are being released more than 24 hours after the discovery.
Related
