Web3Auth infrastructure has suffered an exploit resulting in the leakage of Keplr wallet private keys, with attackers stealing over $6 million. Web3Auth, the wallet authentication infrastructure under Consensys, suffered a security breach on November 7, leading to the leakage of private keys for certain embedded wallets integrated with Keplr (particularly accounts created via Google or Apple logins). Blockchain analytics firm Bitquery estimates that attackers have stolen at least $6 million from over 44,000 wallets across 8 networks in the Cosmos ecosystem, including Cosmos Hub, Osmosis, Celestia, and Injective. Web3Auth has currently suspended its embedded wallet services and initiated asset recovery efforts, while MetaMask and Trust Wallet stated that their users remain unaffected.