Trust Wallet Hacked: What Crypto Users Should Do Now

bitcoinistPubblicato 2025-12-26Pubblicato ultima volta 2025-12-26

Introduzione

Trust Wallet has confirmed a security incident specifically affecting its Chrome browser extension version 2.68, advising users to immediately disable and upgrade to version 2.69. Mobile-only users and those on other extension versions are not impacted. The breach was first flagged by on-chain investigator ZachXBT, who reported multiple users had funds drained. Cybersecurity firm PeckShield estimates losses exceeded $6 million, with a portion sent to centralized exchanges. Trust Wallet is directing affected users to contact support, and Binance founder Changpeng Zhao has stated that Trust Wallet will cover the estimated $7 million in losses. Users are urged to update their extensions and avoid using version 2.68 until upgraded.

Trust Wallet says a “security incident” hit only one slice of its product stack: the Chrome browser extension on version 2.68. If you are a mobile-only user, the company says you’re not affected. If you are on any other extension version, the company says you’re not affected either. The problem, per Trust Wallet’s own wording, is tightly scoped, even if the fallout doesn’t feel that way when you’re staring at an emptied address.

The first public flare went up on Dec. 25 via on-chain investigator ZachXBT, who posted a Telegram warning that “a number of Trust Wallet users have reported that funds were drained from wallet addresses within the past couple of hours.”

He stressed that “the exact root cause has not been determined,” then pointed out an uncomfortable coincidence: “the Trust Wallet Chrome extension pushed a new update yesterday.” In the same message, he asked victims to DM him on X so he could “update the list of theft addresses below as I verify more,” and he began publishing alleged theft destinations across multiple chains. His list included multiple EVM addresses and a Solana address.

Trust Wallet Confirms The Hack

The wallet firm later confirmed the incident on X. “We’ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69,” the company wrote, linking users to the official Chrome Web Store listing.

It added: “Please note: Mobile-only users and all other browser extension versions are not impacted.” The post closed with the kind of line every security team ends up typing sooner or later: “We understand how concerning this is and our team is actively working on the issue. We’ll keep sharing updates as soon as possible.”

Then the guidance got more urgent, and more specific. Trust Wallet warned users who hadn’t updated to 2.69: “please do not open the Browser Extension until you have updated. This may help to ensure the security of your wallet and prevent further issues.”

In a follow-up, it spelled out a step-by-step that boils down to: don’t open the extension, go to Chrome’s extensions page for Trust Wallet, toggle it off if it’s still on, enable Developer mode, hit “Update,” and confirm you’re on version 2.69 before doing anything else. It’s not glamorous, but it’s actionable, which is what matters when you’re in incident mode.

As the claims and counterclaims swirled, cybersecurity firm PeckShield put an early dollar figure on the damage. “The Trust Wallet exploit has drained >$6M worth of cryptos from victims,” PeckShield wrote, adding that while about “~$2.8M of the stolen funds remain in the hacker’s wallets (Bitcoin/EVM/Solana), the bulk – >$4M in cryptos – has been sent to CEXs,” with a breakdown of “~$3.3M to ChangeNOW, ~$340K to Fixed Float, & ~$447K to Kucoin.”

One more pressure point surfaced quickly: compensation. ZachXBT said, “I currently have many concerned victims contacting me via DM so can your team please clarify if you will be offering any compensation for Trust Wallet Browser Extension users.” Trust Wallet did not answer that directly in public. Instead, it replied that its customer support team was already in touch with impacted users regarding next steps and directed people to reach out via its support channel.

So what should users do now, in plain terms? If you are on extension version 2.68, Trust Wallet’s instruction is to stop using it as-is: disable it and upgrade to 2.69 before you open it again. If you think you were affected, the company is routing users to support, while independent investigator ZachXBT is asking for reports to help map theft flows.

UPDATE: Binance founder Changpeng Zhao confirmed via X that user will be compensated for the hack. “So far, $7m affected by this hack. Trust Wallet will cover. User funds are SAFU. Appreciate your understanding for any inconveniences caused. The team is still investigating how hackers were able to submit a new version,” Zhao wrote today.

At press time, the total crypto market cap stood at $2.95 trillion.

Total crypto market cap sits below the 2021 high, 1-week chart | Source: TOTAL on TradingView.com

Domande pertinenti

QWhich specific version of the Trust Wallet extension was affected by the security incident?

AThe security incident affected Trust Wallet Browser Extension version 2.68 only.

QWhat is the primary action users of the affected extension version should take immediately?

AUsers on version 2.68 should disable the extension and upgrade to version 2.69 before opening it again.

QAccording to cybersecurity firm PeckShield, what was the estimated value of crypto drained in the exploit?

APeckShield reported that the exploit drained over $6 million worth of cryptocurrencies from victims.

QWho first publicly reported the potential issue with Trust Wallet on December 25th?

AOn-chain investigator ZachXBT first reported the issue via a Telegram warning.

QDid Trust Wallet or its parent company commit to compensating affected victims?

AYes, Binance founder Changpeng Zhao confirmed via X that Trust Wallet would cover the losses, stating that user funds are SAFU.

Letture associate

The Truth Behind Digital Banking: The Fragile Ecosystem Supporting 1.46 Billion Users

The article "The Truth About Digital Banks: The Fragile Ecosystem Behind 1.46 Billion Users" provides a data-driven analysis of the digital banking sector based on a verified list of 368 active neobanks as of July 2026. While these platforms collectively serve 1.46 billion users, with Asia (817 million users) and institutions like WeBank and Nubank dominating the landscape, the sector faces significant structural vulnerabilities. A key finding is that only 127 of the 368 neobanks hold full banking licenses. The majority operate atop third-party infrastructure providers like Banking-as-a-Service (BaaS) platforms, creating systemic risk where the failure of a single provider, as seen in past cases like Wirecard and Synapse, can jeopardize multiple consumer brands. Furthermore, the industry experiences a steady, quiet stream of failures, mergers, and shutdowns that often go unreported. The analysis also examines the adoption of artificial intelligence (AI), finding only 67 platforms (18%) have deployed AI at scale, with many innovators based in emerging markets like Nigeria and the Philippines. The infrastructure layer is highly concentrated, with 106 providers supporting the entire ecosystem of 368 consumer-facing brands. The article concludes with three predictions: the unlicensed gap will close through acquisitions or exits; an AI credit model is likely to fail in the next economic downturn; and a nascent but significant trend is the emergence of financial services designed for AI agents rather than humans.

marsbit4 min fa

The Truth Behind Digital Banking: The Fragile Ecosystem Supporting 1.46 Billion Users

marsbit4 min fa

Digital Asset Trading Platform Uphold Cuts 17% of Global Workforce Amid 'Crypto Winter'

Cryptocurrency trading platform Uphold has laid off approximately 17% of its global workforce, affecting 85 full-time employees and contractors. The cuts are part of a strategic shift to reallocate resources towards its rapidly growing corporate services business, as retail cryptocurrency trading activity has declined amid the ongoing market downturn. CEO Simon McLaughlin stated the company is restructuring after years of significant growth and remains confident in the long-term prospects of digital assets and blockchain technology. Founded in 2015, Uphold offers trading and custody services for cryptocurrencies, fiat, stocks, and precious metals. It has recently expanded to provide infrastructure for banks, fintech firms, and broker-dealers to integrate crypto services. The layoffs occur against a backdrop of a prolonged crypto market slump, with total market capitalization falling to around $2.1 trillion by Q2 2024. Factors include weakened trading volumes, reduced retail participation, interest rate hikes, geopolitical uncertainty, and net outflows from U.S. spot Bitcoin ETFs. Uphold clarified it is not shutting down its UK operations or any international offices. The company highlighted strong growth in its corporate platform and announced plans to evolve its consumer app into a broader blockchain-based financial assistant by 2026, offering U.S. stocks, tokenized securities, lending, credit cards, and DeFi yield opportunities.

cryptonews.ru4 min fa

Digital Asset Trading Platform Uphold Cuts 17% of Global Workforce Amid 'Crypto Winter'

cryptonews.ru4 min fa

Has the Crypto Utopia Collapsed? The Industry Reaches an Inflection Point After the Frenzy Subsides

Has the crypto utopia collapsed? The industry is at an inflection point as the hype fades. The prevailing view is that crypto has become an outlet for excess liquidity, with many participants leaving as financial returns have fallen short of past-decade expectations. The 2021 boom has been revealed as an illusion, placing the industry in the "trough of disillusionment" on Gartner's Hype Cycle. This forces a return to first principles: re-evaluating token value, securing DeFi protocols, and finding real-world applications. The core failure is a repetitive cycle of reflexive speculation, driven by the premature liquidity of tokens. The industry's incentives prioritized short-term gains over genuine innovation. While curiosity drives invention, recent DeFi hacks signal a need for engineering and iteration, including token models. The culture is shifting; the industry is no longer in its early stages. Positioned at a turning point on the technology adoption curve, crypto faces the immense challenge of rebuilding finance from scratch, a process of inevitable iteration and failure. Regarding crypto VC, claims of its death are overstated. The exceptional returns of 2016-2021 were an anomaly. The initial crypto-anarchist ethos has largely been co-opted by Wall Street and regulators. The utopian vision is over; the industry is being assimilated into the existing system, becoming a business. Current viable project categories include stablecoins, prediction markets, tokenized assets/RWA, perpetual contracts, and AI/agent integration. Crypto is converging with fintech, far from the envisioned DeFi revolution, and must find killer apps within regulatory boundaries. A reconciliation is possible: cryptocurrency may change value storage and transfer in subtle, imperceptible ways that integrate into existing systems, rather than through revolutionary fanfare. True creativity often emerges from adversity. There remains much to build for those driven by genuine curiosity.

marsbit19 min fa

Has the Crypto Utopia Collapsed? The Industry Reaches an Inflection Point After the Frenzy Subsides

marsbit19 min fa

Lei Jun Earns 7 Billion in One Day from CXMT's IPO? Xiaomi Executive Responds

On July 28th, Changxin Technology's stock price on the Sci-Tech Innovation Board experienced minor fluctuations. The company had made a historic market debut the previous day, becoming the first A-share stock to record a single-day trading volume exceeding 1 trillion yuan. This led to significant paper gains for its strategic investors. Among them, Xiaomi's wholly-owned subsidiary was allocated 18.24 million shares with an initial investment of approximately 158 million yuan. Reports estimated a paper profit of 717 million yuan for Xiaomi founder Lei Jun based on his shareholding structure. However, a Xiaomi executive clarified that this was a corporate investment and should not be conflated with personal wealth. Other major beneficiaries included Alibaba and Nio. Alibaba, an early investor, held nearly a 5% stake through two entities, with an estimated paper gain exceeding 160 billion yuan. Nio, participating in the strategic placement, also saw substantial paper returns. Additionally, state-owned banks and insurance institutions that invested in Changxin recorded potential gains in the hundreds of billions. Conversely, companies like Country Garden reportedly missed out on nearly 50 billion yuan in potential gains after divesting their stakes before the IPO due to liquidity pressures. The article notes that these are paper profits based on the listing price, as the allocated shares are subject to lock-up periods, and final realized gains will depend on future stock performance. An employee from Changxin Technology commented that ordinary staff remain focused on their salaries and benefits rather than the market hype.

marsbit28 min fa

Lei Jun Earns 7 Billion in One Day from CXMT's IPO? Xiaomi Executive Responds

marsbit28 min fa

Trading

Spot
活动图片