As of November 8, 2026, neither Keplr nor Web3Auth had disclosed the exact technical cause of the Web3Auth infrastructure breach

Thefts and exploits that drain funds from exchanges, protocols and bridges, with their post-mortems, laundering routes and recoveries.