Web3Auth, an authentication infrastructure provider owned by Consensys, confirmed a security issue involving certain embedded wallets integrated with Keplr. The vulnerability primarily affected accounts created using Google or Apple login, according to the reported incident details.
Trust Wallet has stated that its users were not affected, while MetaMask reported no evidence of compromised users. However, the potential impact on other third-party integrations remains under investigation.
Web3Auth Security Breach Targets Keplr Embedded Wallets
The security incident involved Web3Auth infrastructure used by certain Keplr embedded wallets. Blockchain analytics firm Bitquery estimated that attackers drained at least $6 million from more than 44,000 wallets.
The affected accounts were distributed across eight networks within the Cosmos ecosystem. These included Cosmos Hub, Osmosis, Celestia and Injective.
Following the discovery, Keplr warned users against depositing additional funds into compromised accounts. Web3Auth also suspended its embedded wallet service while working on recovery measures for vulnerable assets.
The incident highlights the security risks associated with authentication systems that allow users to access cryptocurrency wallets through familiar login methods such as Google and Apple accounts.
Trust Wallet and MetaMask Address Potential Exposure
Concerns quickly spread across the cryptocurrency wallet sector as users sought clarification about whether other services relying on Web3Auth infrastructure had been affected.
Trust Wallet representative Felix stated that Trust Wallet was not impacted by the incident. MetaMask similarly reported that there was no evidence of affected users, although the situation remained under monitoring.
However, the security implications for other third-party integrations had not been fully established at the time of the report. Users of services connected to embedded wallet infrastructure may therefore need to follow further security updates from their respective providers.
Web3Auth Exploit Adds to Growing Crypto Security Concerns
The latest incident comes amid a series of significant cryptocurrency security breaches throughout 2026.
On October 29, Binance reportedly suffered a security incident involving approximately $6.3 billion. Earlier, Bitget experienced an exploit estimated at $387.5 million in September.
Another major incident occurred earlier in 2026 when KelpDAO lost approximately $290 million following an exploit involving cross-chain infrastructure.
These incidents have affected different parts of the cryptocurrency ecosystem, ranging from centralized exchanges and decentralized finance protocols to wallet infrastructure and cross-chain technology.
Security failures involving widely used infrastructure can create risks beyond the platforms directly targeted. They can expose user funds, undermine confidence in connected applications and increase concerns about the reliability of cryptocurrency services.
Bitcoin and Ethereum Market Impact Remains Unconfirmed
Despite concerns surrounding the Web3Auth breach, there is no established evidence connecting the incident to broader cryptocurrency market declines, including movements in Bitcoin and Ethereum prices.
The direct exposure identified in the report involves embedded wallets associated with Keplr and assets across eight Cosmos ecosystem networks. A broader impact on other cryptocurrency projects has not been confirmed.
Investigations and security patches were being rolled out more than 24 hours after the vulnerability was discovered. The extent of the damage and the recovery of affected assets remain important issues as the investigation continues.
source: u,today
Writer: Ethan Collins
Crypto Journalist
Ethan Collins reports on developments across the cryptocurrency and blockchain sector. His work covers market movements, protocol updates, regulatory changes, and emerging trends in digital assets.
He focuses on presenting complex topics in a clear and accessible manner for a broad readership.
Writer: Ethan Collins
Crypto Journalist
Ethan Collins reports on developments across the cryptocurrency and blockchain sector. His work covers market movements, protocol updates, regulatory changes, and emerging trends in digital assets.
He focuses on presenting complex topics in a clear and accessible manner for a broad readership.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.
