A security vulnerability at Web3Auth has forced Cosmos wallet provider Keplr to suspend Google and Apple logins after private keys were exposed, triggering widespread unauthorized transactions.