Trust Wallet Users Lost $7 Million in Cryptocurrency Due to Hack

RBK-cryptoPublicado a 2025-12-26Actualizado a 2025-12-26

Resumen

On December 26, the team behind Trust Wallet, a popular cryptocurrency wallet owned by Binance, reported a security breach affecting the browser extension version 2.68. According to Binance founder Changpeng Zhao, the incident was the result of a hack, resulting in losses of approximately $7 million. Users of the compromised version were advised to disable or uninstall it and upgrade to the secure version 2.69. The breach did not impact the mobile application. Trust Wallet's native token (TWT) initially dropped around 7% in price but recovered after the official announcement. Zhao stated that Trust Wallet would cover all user losses and urged affected individuals to contact support. Although no official cause was confirmed, reports suggest that version 2.68 contained hidden malicious code that intercepted users' secret recovery phrases during wallet imports, sending them to an external server. This allowed attackers to gain full access to affected wallets. Some community members, including Zhao, suspect the breach may have been an inside job involving a team member.

On the night of December 26, the team of the popular cryptocurrency wallet Trust Wallet reported a security breach that affected the browser application version 2.68. As explained by Binance founder and head of YZi Labs, which owns Trust Wallet, Changpeng Zhao, the incident occurred as a result of a hacker attack, and the damage amounted to $7 million.

Users of version 2.68 should disable or delete this build and only then install the new version 2.69, and under no circumstances should they open or use the unsafe version. The hack only concerns the browser version 2.68 and did not affect the mobile application.

The native token of Trust Wallet (TWT) reacted with a price drop of about 7%, falling for three hours before the team's announcement around 01:20 Moscow time on December 26. After the official announcement, the TWT price recovered to previous levels and the asset is trading slightly below $0.83.

Zhao stated that Trust Wallet will cover all user losses, and affected users were asked to write to the wallet's support service, a link to which can be found on the official website.

No official statements have been made regarding the causes of the hack. But its essence, according to a report by user Akinator on social network X, may be that a hidden malicious code was embedded in version 2.68 of the Trust Wallet browser extension. Akinator was one of the few who reported the hack several hours before the official confirmation from Trust Wallet.

The assumption is that when a user enters their secret phrase to import a wallet, this code stealthily intercepts the data and sends it to an external server. In this way, the attackers could gain full access to the users' wallets and funds.

The crypto community believes that the malicious code was embedded by someone from the cryptocurrency wallet team. In response to a suggestion by X user under the nickname Crazino.eth that the hack was "certainly carried out by an insider working in the team," Zhao replied "probably."

Broke the cycle. How the price of Bitcoin changed over 10 years at Christmas

AI outperformed humans in a crypto trading tournament. What were the results

Miner "capitulation" called a bullish factor for Bitcoin. Why

Preguntas relacionadas

QWhat was the total amount of cryptocurrency lost by Trust Wallet due to the hack?

AUsers lost $7 million in cryptocurrency due to the hack.

QWhich specific version of the Trust Wallet application was compromised in the security breach?

AThe security breach affected the browser application version 2.68.

QWhat was the impact on Trust Wallet's native token (TWT) price following the incident?

AThe native token TWT initially dropped by approximately 7% but recovered to its previous levels after the official announcement, trading slightly below $0.83.

QAccording to the article, how did the alleged malware in version 2.68 potentially steal user funds?

AThe hidden malicious code allegedly intercepted a user's secret recovery phrase during wallet import and sent it to an external server, giving attackers full access to the wallets and funds.

QWho did the crypto community and Binance's Changpeng Zhao suggest might be responsible for the hack?

AThe crypto community and Changpeng Zhao suggested that the hack was likely carried out by an insider within the Trust Wallet team.

Lecturas Relacionadas

VCs on 2025 Crypto Investments: 84% of 118 Tokens Break Issue Price, Only One Type of Company is Quietly Making Money

Crypto investor Ching Tseng categorizes the market into four quadrants based on two axes: crypto-native vs. traditional finance (TradFi)-oriented, and having traction vs. no traction. In 2025, 84.7% of 118 tracked token launches fell below their issuance price, with a median fully diluted valuation drop of 71%. Crypto-native projects without traction are experiencing massive capital destruction, often relying on speculative narratives without sustainable revenue or user retention. Crypto-native teams with traction, often built in prior cycles, generate real revenue but face structural challenges with their tokens lacking direct value capture mechanisms. While some have implemented successful buyback programs, the core issue remains finding growth beyond crypto volatility. TradFi-oriented startups without traction face long, costly enterprise sales cycles but benefit from a robust M&A environment, with crypto acquisitions reaching a record $8.6 billion in 2025. The current winners are TradFi-oriented companies with traction, particularly in the Real World Asset (RWA) tokenization space, which grew from $5.5B to $18.6B in 2025. They are winning through enterprise sales, building alliances, and improving unit economics on established compliance stacks. Their main risk is being bypassed by large incumbent institutions building their own infrastructure. The overarching theme is market maturation, where narrative alone is insufficient for long-term success.

marsbitHace 19 min(s)

VCs on 2025 Crypto Investments: 84% of 118 Tokens Break Issue Price, Only One Type of Company is Quietly Making Money

marsbitHace 19 min(s)

Crypto Trader's Account: Friends Are Leaving, What's Left to Do in This Industry?

Crypto trader Donn reflects on the declining state of the cryptocurrency industry, noting that many peers are leaving due to three core challenges: lack of innovation in the past 2-3 years, the threat of quantum computing to Bitcoin by 2029, and increased DeFi attacks exacerbated by AI models like Claude Mythos. VC activity has stagnated, with few quality token projects generating over $50M in annual income. Liquidity and investor interest have dwindled, shifting focus to traditional markets. For traders, event-based strategies remain viable but are increasingly competitive and low-yield due to reduced open interest and retail participation. Systematic and basis traders are exploring alternative strategies as traditional methods become less profitable. DeFi yield farming is increasingly unattractive due to rising hack risks and insufficient returns, pushing farmers toward off-chain options. On-chain gem hunters still chase high-risk, high-reward opportunities, but success rates are low, and most tokens crash shortly after peaking. Personally, the author is scaling down crypto trading, maintaining a small arbitrage strategy on Polymarket, and exploring AI automation for analytical tasks. He is also researching AI model fine-tuning and broader AI applications beyond crypto, seeking new focus areas as the industry wanes.

marsbitHace 49 min(s)

Crypto Trader's Account: Friends Are Leaving, What's Left to Do in This Industry?

marsbitHace 49 min(s)

To Counter Chinese Models, Silicon Valley's Big Three Even Formed an 'Avengers Alliance'?

In a rare move, Silicon Valley's AI giants—OpenAI, Anthropic, and Google—have formed a coalition called the "Frontier Model Forum" to combat what they term "adversarial distillation." This practice involves companies, particularly Chinese firms like DeepSeek, Moon Dark Side, and MiniMax, allegedly using massive API interactions to extract and replicate the capabilities of advanced models. Anthropic's report claims these firms engaged in over 16 million interactions, copying logic, reasoning chains, and model behaviors to train their own systems at lower costs. While distillation is a known technique, the alliance argues it threatens both commercial interests and safety, as distilled models may bypass critical risk assessments. However, the accusations are met with skepticism, citing hypocrisy, as these giants themselves face lawsuits over unauthorized data scraping. The debate highlights the unresolved ethical and legal gray areas in AI development.

marsbitHace 49 min(s)

To Counter Chinese Models, Silicon Valley's Big Three Even Formed an 'Avengers Alliance'?

marsbitHace 49 min(s)

XRP Ledger Gains Ground, Surpassing Solana In RWA Space – Pundit Shares

The XRP Ledger (XRPL) is gaining significant traction in the cryptocurrency sector, particularly in the real-world asset (RWA) tokenization space, where it has surpassed Solana. With nearly $1.9 billion in tokenized assets, XRPL is positioning itself as a leading network for efficient, affordable, and scalable blockchain integration with traditional assets. A key development is the new TokenEscrow feature, which enables secure holding and release of tokenized assets. According to experts, this amendment, combined with Flare Networks' compute layer, enhances privacy and compliance for RWAs, signaling strong institutional momentum rather than speculative interest. Additionally, Ripple Labs has announced a multi-phase plan to make the XRP Ledger quantum-ready by 2028, addressing potential future threats from quantum computing to blockchain cryptography. The strategy involves post-quantum recovery, proactive planning, exploration of new cryptographic primitives, and a full transition to quantum-resistant signatures.

bitcoinistHace 1 hora(s)

XRP Ledger Gains Ground, Surpassing Solana In RWA Space – Pundit Shares

bitcoinistHace 1 hora(s)

Warsh Hearing Firmly States: Will Never Be Trump's 'Puppet', Vows to Uphold Federal Reserve Independence

In a Senate Banking Committee hearing on his nomination as Federal Reserve Chair, Kevin Warsh strongly emphasized the Fed's independence, vowing he would "absolutely not" be a "puppet" for former President Trump. He stated that Trump never asked for, and he would never have given, any promise to cut interest rates. Warsh outlined plans for significant reforms at the Fed, including a new inflation framework, less frequent communication from officials, and a gradual reduction of its $6.7 trillion balance sheet. He argued the Fed's recent struggles were self-inflicted and that its large balance sheet had exacerbated wealth inequality ("K-shaped" economy). While not explicitly calling for rate cuts, Warsh suggested AI could boost productivity and create room for them, though he acknowledged its short-term inflationary risks. He also supported integrating digital assets into the financial system but opposed a Fed-issued CBDC. A key obstacle to his confirmation remains Senator Tillis, who vowed to block the nomination until a Justice Department investigation into Chair Powell is resolved.

marsbitHace 1 hora(s)

Warsh Hearing Firmly States: Will Never Be Trump's 'Puppet', Vows to Uphold Federal Reserve Independence

marsbitHace 1 hora(s)

Trading

Spot

Futuros