As of November 8, 2026, neither Keplr nor Web3Auth had disclosed the exact technical cause of the Web3Auth infrastructure breach