Bitquery traces $6.01M theft to Keplr wallets created with Google and Apple logins

The losses center on social-login accounts whose key handling ran through third-party provider Web3Auth Somebody walked off with at least $6.01 million from Keplr wallets over November 6-7, 2026. The losses trace back to exposed private keys tied to accounts created with Google or Apple logins. Blockchain analytics firm Bitquery followed the money. What it found points to the convenient sign-in option, not the wallet’s traditional setup method, as the weak link. That distinction matters for anyone holding assets in Keplr right now. The reported exposure involves social-login accounts, the ones where a user taps “Sign in with Google” instead of writing down a list of seed words. How the drain unfolded Bitquery’s analysis identified roughly 44,700 distinct wallets touched by unauthorized transactions. Its breakdown counted 44,041 wallets on Cosmos ecosystem chains and 7,603 on Injective. The Cosmos Hub took the biggest hit. Approximately $3.5 million of the losses came from that chain alone. A chunk of that Cosmos Hub figure involved staked assets. About 1.96 million staked ATOM moved out without going through the usual 21-day unbonding period. The timing data stings too. Bitquery tr...