Crypto industry is dealing with another security turmoil, as a breach at Web3Auth, the wallet authentication infrastructure owned by Consensys, has exposed private keys of certain Keplr wallets, according to the official statement of TrustWallet representative on X.
The November 7 incident led to emergency service suspensions and recovery efforts, which could add pressure to an already fragile crypto market.
Web3Auth compromise
Web3Auth confirmed that a security issue in its infrastructure had compromised certain embedded wallets integrated with Keplr, especially accounts created through Google or Apple login.
Blockchain analytics firm Bitquery estimates that attackers drained at least $6 million from more than 44,000 wallets.
Those wallets sit across eight Cosmos ecosystem networks, including Cosmos Hub, Osmosis, Celestia and Injective.
Keplr warned users from depositing into compromised accounts and Web3Auth on their side suspended embedded wallet service, actively working on a recovery of vulnerable assets.
MetaMask stated that there is no evidence of affected users, though the situation is still under control. Trust Wallet has been unaffected, says its representative Felix. The impact on other third-party integrations is yet to be confirmed.
The series of large hacks
On October 29, Binance reportedly suffered a massive security breach involving around $6.3 billion, while Bitget was hit by an exploit estimated at $387.5 million in September.
Earlier in 2026, KelpDAO lost around $290 million after an exploit involving cross-chain infrastructure.
DeFi protocols, wallet infrastructures, smart contracts: those kinds of incidents are relevant for almost every project on the market. Exploits directly affect market sentiment, investors losses and safety in the industry in general.
Projects that rely on embedded wallet technology and Cosmos-related assets have unfortunately been affected directly and repeated security failures might damage their market picture state even further.
Luckily, there's no proven link between the Web3Auth expoit and declines on the market as a whole, including assets like Bitcoin and Ethereum. The investigations and rapid protocol patches are being released after more than 24 hours since the discovery.
