Web3Auth disputes $6.01 million Keplr theft estimate, says funds went to recovery wallets

The social-login provider says on-chain movements flagged as theft were partly whitehat recoveries routed to verified addresses Web3Auth is pushing back on a figure that spread fast across crypto circles: a reported $6.01 million theft from Keplr social-login wallets. The company says that estimate was false because the funds in question moved to verified recovery wallets, not to an attacker’s pocket. The dispute matters because it sits on top of a real security incident. A vulnerability in Web3Auth’s services hit Keplr users who signed in with Google and Apple accounts.