# Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

Source: [The Hacker News](https://thehackernews.com/2026/11/web3auth-flaw-exploited-to-steal-keplr.html) · 2026-11-09 · Security
Page: https://themorning.dev/story/web3auth-flaw-exploited-to-steal-keplr-crypto-provider-empties-other-wallets-for-a02fb0af291601b9
Kind: security · Impact: high

## In brief

- Some Keplr wallet users who set up wallets with Google or Apple sign-in had money stolen by an attacker.
- Keplr uses Web3Auth to run that Google and Apple sign-in, and the attacker used a security flaw at Web3Auth to reach the wallets.
- According to the article headline, Web3Auth emptied other wallets for safety.

## Why it matters

Wallets that depend on third-party social login can be compromised through that provider's flaw, so developers relying on external authentication services should review that dependency.

## Coverage

- [Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety](https://thehackernews.com/2026/11/web3auth-flaw-exploited-to-steal-keplr.html) — The Hacker News, 2026-11-09

Tags: web3auth, keplr, crypto-wallet, authentication, security-breach

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev