Keplr Suspends Google, Apple Logins After $6M Exploit Hits Cosmos Wallets

The wallet provider paused social login options tied to Web3Auth infrastructure following a multimillion-dollar drain across Cosmos-based accounts.

Keplr has disabled Google and Apple social login functionality after reports surfaced of a wallet drain totaling roughly $6 million across the Cosmos ecosystem. The move was confirmed by crypto.news, which reported the suspension as a direct response to the incident. Keplr is widely used to interact with Cosmos-based chains, including staking, governance, and decentralized application access.

The drain has been connected to Web3Auth, a third-party service that several wallets use to let users log in with familiar credentials instead of managing a seed phrase directly. Web3Auth's model converts social login sessions into cryptographic keys, removing the need for users to store a traditional recovery phrase. That convenience has made it popular among wallets targeting newer crypto users.

U.Today reported that Trust Wallet has stated its products are not affected by the Web3Auth exploit. The outlet also noted that other wallets using similar infrastructure may face exposure, though the full list of affected products has not been finalized. This has prompted wallet providers across the industry to review their own dependencies on Web3Auth before issuing public statements.

Social login systems have grown in popularity because they lower the barrier to entry for new crypto users. Instead of safeguarding a 12 or 24-word seed phrase, users authenticate through an existing Google or Apple account. That design shifts part of the security burden onto the login provider and the key-management layer that converts those credentials into wallet access.

When that layer is compromised, the consequences can extend across many wallets that rely on the same backend, rather than being contained to a single application. This is why a vulnerability tied to one infrastructure provider can affect multiple wallet brands simultaneously, even if each wallet has its own interface and branding.

Keplr's decision to suspend Google and Apple logins reflects a precautionary approach common after this type of infrastructure-level incident. Pausing the affected login method limits new exposure while the underlying cause is investigated. It does not necessarily mean every user who used social login was compromised, but it reduces risk until the vulnerability is addressed.

The Cosmos ecosystem, which relies on an interconnected network of independent blockchains, has faced scrutiny in the past over interoperability-related security issues. Wallet-layer incidents add another dimension to that scrutiny, since wallets sit at the point where users directly control their assets. Any compromise there can have an immediate financial impact, unlike smart contract bugs that may take longer to exploit.

As of the reporting, neither Keplr nor Web3Auth had detailed the exact technical mechanism behind the drain. The $6 million figure has been attributed to the incident, but a full accounting of affected wallets and recovery efforts had not been published at the time of these reports.

Market Impact

Incidents tied to shared infrastructure providers tend to raise questions about counterparty risk within wallet software, even when funds are not held by a centralized exchange. Users and developers may scrutinize which wallets rely on third-party key-management services like Web3Auth, and whether those dependencies are disclosed clearly.

For the Cosmos ecosystem specifically, a wallet-level exploit could temporarily affect user confidence in staking and governance participation, since Keplr is a primary access point for those activities. Broader market impact is likely to be limited to affected tokens and wallets rather than the sector as a whole, unless further wallets confirm exposure to the same vulnerability.

The suspension of Google and Apple logins on Keplr underscores how convenience-focused wallet features can introduce shared points of failure across an ecosystem. Further clarity is expected as Web3Auth, Keplr, and other wallet providers assess the scope of the exploit and confirm which products were affected.

Frequently Asked Questions

What happened to Keplr wallet?

Keplr suspended its Google and Apple social login options after reports of a $6 million wallet drain affecting the Cosmos ecosystem, according to crypto.news.

What is Web3Auth and how is it connected to this incident?

Web3Auth is a third-party service that lets wallets offer social logins instead of traditional seed phrases. The drain has been linked to a vulnerability in this infrastructure, which multiple wallets rely on.

Is Trust Wallet affected by this exploit?

No. U.Today reported that Trust Wallet has stated its products are not affected by the Web3Auth exploit, though other wallets' exposure is still being assessed.

Does this mean all Keplr users lost funds?

Not necessarily. Keplr's suspension of social logins is a precautionary step to limit further risk while the cause of the drain is investigated, not confirmation that every user was impacted.