Digital Asset
Intelligence
Security Incident · Wallet

Keplr Wallet Supply Chain Attack: $6.01M Reported Loss

·Source-attributed incident record

Incident Overview

Keplr Wallet accounts created via Google or Apple social login (powered by Web3Auth) suffered a private key breach due to a Web3Auth infrastructure vulnerability, leading to unauthorized transactions. Over 44,000 wallets were affected with ~$6.01 million in on-chain transfers. Web3Auth, assisted by Keplr, conducted whitehat recovery moves to secure funds in designated recovery wallets. Accounts using recovery phrases or hardware wallets were unaffected. Social logins have been paused.

Sources & References

Original incident referencehttps://x.com/keplrwallet/status/2118926087615045807 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    LNbits

    Attack methodSoftware Vulnerability
    Reported loss$ 1,700
  2. Incident date
    Target

    Flap

    Attack methodDNS Hijacking
    Reported lossNot disclosed
  3. Incident date
    Attack methodSupply Chain Attack
    Reported loss$ 138,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000