Trust Wallet says its users are not affected by the Web3Auth security issue that hit some Keplr wallets. A representative for the wallet, Felix, said on X that Trust Wallet has not been impacted. The company’s statement came after Web3Auth confirmed a problem in its wallet authentication service.
What Web3Auth confirmed
Web3Auth said a security issue in its infrastructure affected certain embedded wallets tied to Keplr. The accounts were mainly created through Google or Apple login, according to the company. Web3Auth suspended its embedded wallet service and began recovery work. Keplr advised users not to deposit funds into affected accounts while checks continue.
Blockchain analytics firm Bitquery estimates attackers drained at least $6 million from more than 44,000 wallets. The affected wallets are spread across eight Cosmos networks, including Cosmos Hub, Osmosis, Celestia and Injective. That range makes the incident notable, though the exact total may change as investigators review the data.
Who else is affected
MetaMask said it has no evidence of affected users, but the situation is still being watched. The impact on other third-party integrations has not been fully confirmed. Some projects that rely on embedded wallet tools and Cosmos-related assets may need to check their exposure. Users should be careful with any wallet created through social login, especially if it uses Web3Auth.
The incident led to emergency service suspensions and recovery efforts. It also adds pressure to a crypto market that has been dealing with a series of security failures. On October 29, Binance reportedly faced a large breach involving around $6.3 billion. Bitget was hit by an exploit estimated at $387.5 million in September. Earlier in 2026, KelpDAO lost around $290 million after an exploit tied to cross-chain infrastructure. I think these numbers are a reminder that wallet and protocol security failures keep affecting sentiment.
Market and user impact
There is no proven link between the Web3Auth exploit and the wider market decline, including assets like Bitcoin and Ethereum. Investigations and protocol patches are being released more than 24 hours after the discovery. That delay is perhaps one reason users are still looking for clear answers.
For now, the practical advice is simple. Avoid depositing into flagged Keplr accounts. Check official channels before moving funds. Trust Wallet users appear to be in the clear, but other integrations may still need time to confirm their status. The incident is another test for wallet providers that depend on shared authentication tools. It may also push teams to review how much control they have when a third-party service fails.
