Web3Auth moves $5.6M out of exposed Keplr wallets ahead of hackers

The disclosure is notable less for the rescue than for what it leaves unsaid: Web3Auth's reference to an "original attacker" implies a loss it has not quantified, so the $5.6M figure describes only the portion recovered ahead of the hackers, not the total exposure. That gap matters for Keplr users trying to judge whether their own wallets were affected, and it puts pressure on Web3Auth to clarify the sequence of events. Whether the company details the original theft, and how Keplr responds, is the open question.