# Web3Auth Moves $5.6 Million From Vulnerable Keplr Wallets

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/52492
Published: 2026-11-09T18:57:49.000Z
Updated: 2026-11-09T18:57:49.000Z
Section: Technology

> Twelve recovery addresses hold about 2.49 million Cosmos Hub tokens (ATOM), worth roughly $3.3 million; the amount stolen before the transfers remains undisclosed.

Web3Auth said it moved funds from Keplr wallets created with Google or Apple sign-in to recovery addresses after a flaw in its service exposed some private keys, placing about $5.6 million in crypto under recovery control.

The 12 recovery addresses hold about $5.6 million in digital assets, including roughly 2.49 million Cosmos Hub tokens (ATOM) worth about $3.3 million. The $5.6 million figure is the balance at those addresses; it is not a disclosed total for assets held before the transfers or for funds lost in the incident.

Keplr co-founder Josh Lee estimated that about 20% of accounts created with Google or Apple login were affected, but said only a small fraction had been exploited. His estimate covers affected accounts, not confirmed thefts, and no stolen amount has been disclosed.

Web3Auth also referred to an “original attacker,” while leaving the amount stolen before its transfers undisclosed. The address balances show what was moved into recovery, but do not account for any assets attackers may have taken beforehand.