#keplr - the daily grind

BREAKING

Nov 9A Web3Auth Flaw Exposed Keys to 44,700 Keplr Wallets. Some of the "Attacker" Wallets Draining Them Turned Out to Be Web3Auth's Own●Nov 8MEXC's Terms Banned Iran. FinCEN Says It Moved $1B Directly With 40+ Iranian Exchanges, and Now the US Is Cutting It Off●Nov 6Crypto Spent $56M, a Third of Its Midterm War Chest, to Keep Sherrod Brown Out of the Senate. He Won by Nearly 5 Points●Nov 5Circle Says Revenue Grew 17%. Take Out the $182M It Made Selling Its Own Token and Revenue Shrank. It's Also Cutting 5% of Staff●Nov 4$133M Just Walked Out Through Kraken, Crypto.com and OKX. Nobody Has Admitted Being Robbed, and ZachXBT Thinks a European Institution Is Covering It Up●Nov 3Mercado Bitcoin Says There Was 'No Loss to Customers'. The Attacker Still Reached 27,160 Customer Deposit Addresses and Walked Off With About $46M●Nov 2A 10 ETH Bug Did What the FBI Asked For. THORChain Accidentally Locked North Korea Out of Its Favorite Laundering Route●Nov 1The FBI Asked Crypto to Block 600+ Addresses Tied to the Binance Hack. Chainalysis Says North Korea Is Already Using Thousands●Oct 31Binance Blamed One Laptop. A Day Later It Found 'Additional Points of Breach', and the Hacker Had Been Rehearsing for 36 Hours●Oct 30Binance Says 'No Wallet Private Key Leak.' It Didn't Need One: A DevOps Engineer's Laptop Moved $6.3 Billion●Nov 9A Web3Auth Flaw Exposed Keys to 44,700 Keplr Wallets. Some of the "Attacker" Wallets Draining Them Turned Out to Be Web3Auth's Own●Nov 8MEXC's Terms Banned Iran. FinCEN Says It Moved $1B Directly With 40+ Iranian Exchanges, and Now the US Is Cutting It Off●Nov 6Crypto Spent $56M, a Third of Its Midterm War Chest, to Keep Sherrod Brown Out of the Senate. He Won by Nearly 5 Points●Nov 5Circle Says Revenue Grew 17%. Take Out the $182M It Made Selling Its Own Token and Revenue Shrank. It's Also Cutting 5% of Staff●Nov 4$133M Just Walked Out Through Kraken, Crypto.com and OKX. Nobody Has Admitted Being Robbed, and ZachXBT Thinks a European Institution Is Covering It Up●Nov 3Mercado Bitcoin Says There Was 'No Loss to Customers'. The Attacker Still Reached 27,160 Customer Deposit Addresses and Walked Off With About $46M●Nov 2A 10 ETH Bug Did What the FBI Asked For. THORChain Accidentally Locked North Korea Out of Its Favorite Laundering Route●Nov 1The FBI Asked Crypto to Block 600+ Addresses Tied to the Binance Hack. Chainalysis Says North Korea Is Already Using Thousands●Oct 31Binance Blamed One Laptop. A Day Later It Found 'Additional Points of Breach', and the Hacker Had Been Rehearsing for 36 Hours●Oct 30Binance Says 'No Wallet Private Key Leak.' It Didn't Need One: A DevOps Engineer's Laptop Moved $6.3 Billion●

BTC -- --%

ETH -- --%

Fear & Greed F&G 50 Neutral

#keplr

1 post

A Web3Auth Flaw Exposed Keys to 44,700 Keplr Wallets. Some of the "Attacker" Wallets Draining Them Turned Out to Be Web3Auth's Own

Nov 9, 2026 · 5 min read

Keplr suspended Google and Apple logins after a flaw at its key provider Web3Auth exposed private keys. Bitquery traced $6.01M in transfers out of about 44,700 wallets. Then Keplr and Web3Auth published 12 'recovery' addresses that overlap with the collector wallets, because Web3Auth had swept still-vulnerable accounts using the attacker's own path. Nobody can yet say how much was actually stolen.