ZachXBT flags suspected Trust Wallet extension issue as users report drained funds

ambcryptoPublicado a 2025-12-25Actualizado a 2025-12-25

Resumen

Security concerns emerged around the Trust Wallet browser extension on December 25, after blockchain investigator ZachXBT flagged suspicious activity potentially linked to a recent update. Reports suggest a supply-chain compromise may have been introduced in a December 24 update, where newly added code could silently exfiltrate sensitive wallet data—particularly during seed phrase imports—leading to immediate fund draining. Multiple users reported losses, with unverified estimates exceeding $2 million. The malicious code allegedly sent data to a recently registered external domain mimicking Trust Wallet infrastructure. The issue appears limited to the browser extension, with no evidence of mobile app compromise. Trust Wallet has not yet issued an official response or advisory. Researchers emphasize the situation remains under investigation, warning users to avoid importing seed phrases into the extension until clarified. If confirmed, this would represent a significant supply-chain attack.

Security concerns have emerged around the Trust Wallet browser extension on 25 December, after blockchain investigator ZachXBT flagged suspicious activity potentially linked to a recent update, prompting warnings from developers and security-focused accounts.

According to posts circulating on X, the issue may stem from a suspected supply-chain compromise introduced in a 24 December browser extension update.

Newly added code within the extension could silently exfiltrate sensitive wallet data when users import a seed phrase. The claims suggest that this has led to immediate wallet draining.

Alleged Trust Wallet malicious code and data exfiltration claims

Developers examining the extension allege that a JavaScript file added in the update contains logic disguised as analytics.

The code is said to activate specifically when a seed phrase is imported. It then silently transmits wallet-related data to an external domain designed to resemble official Trust Wallet infrastructure.

The domain referenced in the reports was reportedly registered only days ago and has since gone offline.

Researchers argue that its recent creation and the timing of the extension update raise concerns about a coordinated supply-chain attack rather than user-side phishing.

Users report wallet drains following seed imports

Multiple users have reported wallets being drained shortly after importing seed phrases into the Trust Wallet browser extension.

Publicly shared estimates suggest that more than $2 million may have been lost. Although these figures have not been independently verified.

Analysts indicate that funds were routed through multiple addresses, a pattern more commonly associated with automated exploitation than isolated user error.

Scope appears limited to browser extension

At this stage, there is no indication that Trust Wallet’s mobile applications are affected.

The warnings circulating online are focused specifically on the browser extension. This is where update mechanisms and third-party dependencies present higher supply-chain risk.

Users are advised not to import seed phrases into the Trust Wallet browser extension until further clarification is provided.

No official response from Trust Wallet yet

As of the time of writing, Trust Wallet has not issued any public response, clarification, or security advisory addressing the allegations.

There has been no confirmation or denial of the claims, nor any announcement of an extension, rollback, or emergency patch.

Investigation ongoing

Researchers have emphasized that the situation remains under active investigation. Conclusions should not be drawn until the extension code and related on-chain activity have been fully reviewed.

If confirmed, the incident would represent a serious supply-chain compromise.

This is a class of attack that differs significantly from phishing or user-side mistakes. Also, it has historically resulted in rapid, large-scale losses across the crypto ecosystem.

Final Thoughts

The allegations point to a potentially serious supply-chain risk affecting wallet extensions, underscoring how code updates can become a critical attack vector if compromised.
With no response yet from Trust Wallet, users and researchers are left relying on independent investigation as scrutiny around the incident continues.

Preguntas relacionadas

QWhat security concern was flagged by ZachXBT regarding the Trust Wallet browser extension?

AZachXBT flagged suspicious activity potentially linked to a recent update of the Trust Wallet browser extension, suggesting it could be a supply-chain compromise that leads to the silent exfiltration of sensitive wallet data and immediate draining of funds.

QHow does the suspected malicious code in the Trust Wallet extension allegedly operate?

AThe malicious JavaScript code, added in an update and disguised as analytics, is said to activate when a user imports a seed phrase. It then silently transmits wallet-related data to an external domain designed to look like official Trust Wallet infrastructure.

QWhat is the estimated financial impact based on user reports, and how were the funds moved?

APublicly shared estimates suggest that more than $2 million may have been lost, though this is unverified. Analysts indicate the funds were routed through multiple addresses, a pattern associated with automated exploitation rather than isolated user error.

QAre Trust Wallet's mobile applications also affected by this suspected compromise?

ANo, there is no indication that Trust Wallet’s mobile applications are affected. The warnings are specifically focused on the browser extension, which has higher supply-chain risk due to its update mechanisms and third-party dependencies.

QWhat is the current status of Trust Wallet's official response to these allegations?

AAs of the time the article was written, Trust Wallet had not issued any public response, clarification, or security advisory addressing the allegations. There has been no confirmation, denial, or announcement of an emergency patch.

Lecturas Relacionadas

Platform Token Surges 15-Fold in Half a Month, Pons Tops Both Token Issuance and Trading on Robinhood Chain

The article details the rapid rise of Pons as the leading token launch and trading platform on Robinhood Chain. Following NOXA's halt of new token issuance, several platforms vied for the resulting traffic. By mid-July, Pons surged ahead, achieving the highest daily token creation volume (over 15,000 tokens on July 15th) and soon after capturing the largest daily trading volume ($40.7M on July 18th), consistently maintaining both top positions. Pons's key advantage is its streamlined, single-transaction process that deploys a token's contract and its Uniswap V3 liquidity pool simultaneously, eliminating the need for bonding curves or subsequent DEX migrations. This simplicity caters to the demand for fast, low-cost launches on Robinhood Chain. The platform's native token, PONS, played a pivotal role in its growth, experiencing a price surge of over 15x from mid-July. A tokenomics model that uses 80% of protocol fees to buy back and burn PONS has contributed to its value and heightened platform visibility. Looking ahead, Pons V2 aims to expand beyond meme tokens by integrating support for paying transaction fees with assets like USDG or RWA tokens, aligning with Robinhood Chain's focus on on-chain finance and real-world assets.

marsbitHace 19 min(s)

Platform Token Surges 15-Fold in Half a Month, Pons Tops Both Token Issuance and Trading on Robinhood Chain

marsbitHace 19 min(s)

Apple's Q3 Results Largely Meet Expectations, Supply and Memory Pressure Drive After-Hours Drop of 6%

Apple's Q3 (FY2026) earnings largely met expectations, but weak guidance and rising costs drove the stock down 6.3% after hours. Revenue of $109.42B slightly beat estimates, and EPS of $2.02 was boosted by a $0.11 tariff refund. Core EPS was $1.91, aligning with forecasts. iPhone and Mac sales were strong, but iPad and Services revenue fell short. Greater China growth slowed. The outlook for the next quarter is concerning. Apple guided for 9-11% revenue growth, below the ~12% consensus, citing significant supply constraints for iPhones, Macs, and iPads due to advanced chip shortages. Gross margin guidance of 47-48% includes a 1-point tariff benefit, implying a core margin of 46-47%, down from 48.1% this quarter. Management highlighted rising memory costs as a major pressure point. While Apple's AI initiatives like Siri are progressing, monetization remains early. With the stock near all-time highs, the combination of in-line results, segment weaknesses, and a cautious outlook triggered significant profit-taking. The focus has shifted from resilient demand to supply chain execution and cost management.

marsbitHace 24 min(s)

Apple's Q3 Results Largely Meet Expectations, Supply and Memory Pressure Drive After-Hours Drop of 6%

marsbitHace 24 min(s)

Platform Token Soars 15x in Half a Month, Pons Tops Robinhood Chain Charts for Both Token Launches and Trading

In just half a month, the Pons platform token (PONS) surged over 15x in value as Pons solidified its position as the leading token launch and trading platform on Robinhood Chain, capturing both the highest daily token creation volume and transaction volume. Following the exit of previous leader NOXA, competition initially favored Flap before Pons emerged dominant around mid-July. By July 26th, Pons accounted for 77.1% of total trading volume across all Robinhood Chain launchpads. Pons's success is attributed to its streamlined, one-transaction process for deploying a token contract and its corresponding Uniswap V3 liquidity pool simultaneously, eliminating the need for bonding curves or complex migrations. This simplicity, combined with low creation costs and immediate tradability, attracted significant creation activity and speculative trading. The meteoric rise of its native token, PONS, further fueled platform growth. A tokenomics model directing 80% of protocol fees to buy back and burn PONS created a reinforcing cycle: platform usage boosted PONS value, which in turn attracted more users. Looking ahead, Pons V2 aims to expand beyond meme tokens by integrating support for paying fees in stablecoins (USDG) and RWA assets, aligning with Robinhood Chain's broader focus on on-chain finance and stock tokens.

Odaily星球日报Hace 24 min(s)

Platform Token Soars 15x in Half a Month, Pons Tops Robinhood Chain Charts for Both Token Launches and Trading

Odaily星球日报Hace 24 min(s)

Qualcomm Chip Price Hike Deals a Blow to Android Phones

Qualcomm has officially announced a new round of price increases for its entire chip portfolio, effective September 1. The hikes, reaching up to 18% for the flagship Snapdragon 8 Elite Gen 6 Pro, follow similar moves by MediaTek, intensifying cost pressures on the already strained smartphone industry. CEO Cristiano Amon confirmed the plan, citing the need to offset rising industry-wide costs and restore declining profit margins. Qualcomm's Q3 FY2026 results showed a 25% drop in net profit, with mobile revenue plunging 20% year-over-year, hitting its lowest level since 2021. The surge in AI computing demand has led memory manufacturers to prioritize HBM production, creating a shortage in general-purpose DRAM and NAND Flash chips. Their prices soared by 93%-98% and 55%-60% respectively in Q1 2026, causing the memory cost share in smartphones to jump from 10%-15% to over 30%. Coupled with the soaring cost of advanced nodes like TSMC's 2nm and packaging, overall chip costs have reached historic highs. These upstream pressures are forcing downstream smartphone brands like Xiaomi, OPPO, and vivo to cut orders for mid-to-low-end models by up to 20% and use cost-saving measures like older chipsets. Reportedly, the Snapdragon 8E5 will be repurposed as a "long-lasting" chip for sub-brand phones in H2 2026. Amid this cost crisis, the Android market remains sluggish. Q2 2026 smartphone shipments in China fell 4.3% year-over-year, marking five consecutive quarters of decline. Major Android brands saw market share drop, while Huawei and Apple, with their in-house chip advantages, gained share. Qualcomm is diversifying into automotive and IoT sectors to reduce reliance on smartphones, but these new segments cannot yet fill the mobile revenue gap. Industry observers warn that the full impact of component cost hikes will hit in the second half of 2026, likely leading to higher-than-expected price increases for Android flagships and a further contraction in the Chinese smartphone market.

marsbitHace 35 min(s)

Qualcomm Chip Price Hike Deals a Blow to Android Phones

marsbitHace 35 min(s)

Breaking: GPT-5.6 Prices Slashed Effective Today

OpenAI has announced significant price cuts for its GPT-5.6 model API, effective immediately. The entry-level **GPT-5.6 Luna** sees the most drastic reduction, with input prices dropping 80% to $0.20 per million tokens and output prices falling to $1.20 per million tokens. The mid-tier **GPT-5.6 Terra** is reduced by 20%, now costing $2.00 (input) and $12.00 (output) per million tokens. The flagship **GPT-5.6 Sol** maintains its original price but introduces a new **Fast mode**, offering speeds up to 2.5 times faster for double the cost. The company attributes these price reductions to efficiency gains achieved through **GPT-5.6 Sol's own involvement in optimizing its production systems**. The model assisted in rewriting GPU kernels and improving speculative decoding, leading to a 20% reduction in end-to-end service costs and over 15% improvement in token generation efficiency. OpenAI emphasizes this process remained human-led. A key focus of the降价 is to lower the barrier for running **AI agent workflows**. By making the capable, tool-calling Luna model significantly cheaper, OpenAI aims to enable more frequent use in cost-sensitive, high-volume tasks like code review and monitoring. This creates a potential feedback loop: model-assisted efficiency gains lead to lower costs, which enables broader agent deployment, which in turn drives further optimization. The new pricing and features will also apply to Codex and ChatGPT Work subscriptions. The changes intensify competition in the large language model market, with OpenAI directly challenging rivals like Anthropic to respond.

marsbitHace 1 hora(s)

Breaking: GPT-5.6 Prices Slashed Effective Today

marsbitHace 1 hora(s)

Trading

Spot