Trust Wallet Users Lost $7 Million in Cryptocurrency Due to Hack

RBK-cryptoPubblicato 2025-12-26Pubblicato ultima volta 2025-12-26

Introduzione

On December 26, the team behind Trust Wallet, a popular cryptocurrency wallet owned by Binance, reported a security breach affecting the browser extension version 2.68. According to Binance founder Changpeng Zhao, the incident was the result of a hack, resulting in losses of approximately $7 million. Users of the compromised version were advised to disable or uninstall it and upgrade to the secure version 2.69. The breach did not impact the mobile application. Trust Wallet's native token (TWT) initially dropped around 7% in price but recovered after the official announcement. Zhao stated that Trust Wallet would cover all user losses and urged affected individuals to contact support. Although no official cause was confirmed, reports suggest that version 2.68 contained hidden malicious code that intercepted users' secret recovery phrases during wallet imports, sending them to an external server. This allowed attackers to gain full access to affected wallets. Some community members, including Zhao, suspect the breach may have been an inside job involving a team member.

On the night of December 26, the team of the popular cryptocurrency wallet Trust Wallet reported a security breach that affected the browser application version 2.68. As explained by Binance founder and head of YZi Labs, which owns Trust Wallet, Changpeng Zhao, the incident occurred as a result of a hacker attack, and the damage amounted to $7 million.

Users of version 2.68 should disable or delete this build and only then install the new version 2.69, and under no circumstances should they open or use the unsafe version. The hack only concerns the browser version 2.68 and did not affect the mobile application.

The native token of Trust Wallet (TWT) reacted with a price drop of about 7%, falling for three hours before the team's announcement around 01:20 Moscow time on December 26. After the official announcement, the TWT price recovered to previous levels and the asset is trading slightly below $0.83.

Zhao stated that Trust Wallet will cover all user losses, and affected users were asked to write to the wallet's support service, a link to which can be found on the official website.

No official statements have been made regarding the causes of the hack. But its essence, according to a report by user Akinator on social network X, may be that a hidden malicious code was embedded in version 2.68 of the Trust Wallet browser extension. Akinator was one of the few who reported the hack several hours before the official confirmation from Trust Wallet.

The assumption is that when a user enters their secret phrase to import a wallet, this code stealthily intercepts the data and sends it to an external server. In this way, the attackers could gain full access to the users' wallets and funds.

The crypto community believes that the malicious code was embedded by someone from the cryptocurrency wallet team. In response to a suggestion by X user under the nickname Crazino.eth that the hack was "certainly carried out by an insider working in the team," Zhao replied "probably."

Broke the cycle. How the price of Bitcoin changed over 10 years at Christmas

AI outperformed humans in a crypto trading tournament. What were the results

Miner "capitulation" called a bullish factor for Bitcoin. Why

Domande pertinenti

QWhat was the total amount of cryptocurrency lost by Trust Wallet due to the hack?

AUsers lost $7 million in cryptocurrency due to the hack.

QWhich specific version of the Trust Wallet application was compromised in the security breach?

AThe security breach affected the browser application version 2.68.

QWhat was the impact on Trust Wallet's native token (TWT) price following the incident?

AThe native token TWT initially dropped by approximately 7% but recovered to its previous levels after the official announcement, trading slightly below $0.83.

QAccording to the article, how did the alleged malware in version 2.68 potentially steal user funds?

AThe hidden malicious code allegedly intercepted a user's secret recovery phrase during wallet import and sent it to an external server, giving attackers full access to the wallets and funds.

QWho did the crypto community and Binance's Changpeng Zhao suggest might be responsible for the hack?

AThe crypto community and Changpeng Zhao suggested that the hack was likely carried out by an insider within the Trust Wallet team.

Letture associate

XRP Ledger v3.3.0 Release Brings Five Amendments Into Focus

The upcoming XRP Ledger v3.3.0 release, scheduled for early August, focuses on five key amendments: Confidential MPT, Batch, Permission Delegation, Sponsored Fees and Reserves, and Dynamic MPT. This bundle aims to enhance the ledger's infrastructure for advanced use cases like tokenized assets and improve operational flexibility and user experience. Notably, Sponsored Fees could reduce onboarding friction by allowing third parties to cover transaction costs, while Confidential and Dynamic MPT features provide more control for institutional asset tokenization. Batch transactions and Permission Delegation add operational efficiency for applications. However, these features do not activate automatically upon release; they require approval from 80% of network validators. The upgrade represents a significant step in XRPL's roadmap for enterprise and developer utility, with practical impact dependent on subsequent validator consensus and builder adoption.

bitcoinist7 min fa

XRP Ledger v3.3.0 Release Brings Five Amendments Into Focus

bitcoinist7 min fa

Wall Street Morning News: V-shaped Rebound at Month-end, but Nasdaq Suffers Worst July in 12 Years; Funds Accelerate Concentration Towards Cloud Giants

Despite a V-shaped rebound at the end of July, the Nasdaq posted its worst July since 2004, while the S&P 500 had its worst July since 2014. Markets were jolted by geopolitical shifts, as President Trump canceled a planned strike on Iran, leading WTI crude to plunge over 8%. This, alongside OPEC+ announcing a supply increase, reversed crude's sharp July gains. Treasury yields surged, with the 10-year yield rising over 30 basis points in July—its largest July increase since 2005. In a rare move, the US and Japan jointly intervened to weaken the USD/JPY, aiming to prevent potential Japanese sales of US Treasuries. While the tech sector faced deleveraging pressure throughout July, cloud giants staged a massive rally on strong earnings. Microsoft, Amazon, and Google collectively added nearly $1.5 trillion in market value last week. Amazon soared over 15% on accelerating AWS growth, Microsoft extended historic gains, Google fully recovered post-earnings losses, and Meta ended an 11-day losing streak. In contrast, Apple tumbled over 7% on supply chain and guidance concerns, ceding its "world's most valuable company" title to Nvidia. The memory and storage sector corrected sharply. Gold edged up 0.91% in July, with analysts viewing the ~30% pullback from January highs as a potential basing period, supported by long-term central bank demand. Key events to watch this week include earnings from Palantir, AMD, SpaceX (its first post-IPO report), and memory giants like Western Digital. The US July non-farm payrolls report on Friday will be critical for gauging the Fed's policy path. SpaceX also faces a significant lock-up expiration, testing market liquidity.

marsbit31 min fa

Wall Street Morning News: V-shaped Rebound at Month-end, but Nasdaq Suffers Worst July in 12 Years; Funds Accelerate Concentration Towards Cloud Giants

marsbit31 min fa

Rubin Ultra Makes Major Cuts, Even Nvidia Can't Handle Memory Price Hikes?

NVIDIA's Rubin Ultra, the top-tier variant of the newly announced Rubin AI accelerators, has reportedly seen significant specification downgrades, according to an industry report from SemiAnalysis. Initially designed with four compute dies (4-die), the Rubin Ultra is now said to be reduced to a 2-die design. Key changes highlighted in the report include: * **No increase in peak theoretical compute performance**, remaining at 35 PFLOPs like the standard Rubin. * **Severe reduction in memory capacity** to 192GB using 8-Hi HBM stacks, which is less than the standard Rubin's 288GB using 12-Hi stacks. * **Negligible memory bandwidth improvement** of only 1 TB/s. * **Slightly higher chip-level power consumption**. * The **primary upgrade is a massive increase in scale-up interconnect capacity**, supporting connections for up to 576 GPUs via NVLink, compared to 72 for the standard Rubin. The report suggests the redesign is primarily a cost-optimization move driven by the sharp rise in HBM (High-Bandwidth Memory) prices. By reducing the expensive HBM content and shifting investment towards enhanced system-scale networking, NVIDIA aims to maintain the platform's value for large-scale AI training clusters while managing soaring material costs. The news reportedly triggered a sell-off in South Korean memory stocks, with SK Hynix and Samsung shares falling around 8%, as markets grew concerned that NVIDIA—a major HBM buyer—might be reducing its reliance on high-capacity memory, potentially capping future pricing power for memory makers.

Odaily星球日报52 min fa

Rubin Ultra Makes Major Cuts, Even Nvidia Can't Handle Memory Price Hikes?

Odaily星球日报52 min fa

Upbit Rebalances 864B SHIB In Internal Wallet Move

South Korean cryptocurrency exchange Upbit moved a total of 864 billion SHIB (worth approximately $4 million) between its internal wallet addresses. The activity, involving transfers of 384 billion SHIB outbound and 480 billion SHIB inbound, occurred following a 36% SHIB price rally. On-chain data indicates this was a routine internal wallet rebalancing operation by the exchange, not a sell-off or liquidation event. The article cautions that while large on-chain transfers are highly visible, they require proper context and wallet labeling to interpret correctly. In this case, the movement between known Upbit addresses does not inherently signal a change in market supply or selling pressure for SHIB.

bitcoinist1 h fa

Upbit Rebalances 864B SHIB In Internal Wallet Move

bitcoinist1 h fa

Can Generative Models Finally Be Trained End-to-End? The Core Is a For Loop

This article introduces a novel training paradigm for generative models called Explorative Modeling (XM), which enables true end-to-end training. Traditionally, powerful generative models like autoregressive and diffusion models are not trained end-to-end. They are trained to predict a single small step but require iterative multi-step sampling for inference. This "exposure bias" leads to error accumulation and limits performance. The core challenge XM addresses is "mode blurring." In generative tasks, a single input (e.g., "generate a dog") corresponds to many valid outputs (multiple modes). Standard training objectives like reconstruction loss force the model to average these modes, producing unrealistic, blurry outputs. To avoid this, existing models break generation into many small, almost deterministic steps, sacrificing end-to-end training. XM tackles this by restructuring the training loop itself. Its key insight is to amplify "generative expressivity." For each training input, instead of generating one sample, the model generates K candidate outputs. Only the candidate closest to the real data is used for computing the loss and updating the model via backpropagation. This simple "best-of-K" mechanism is implemented as a short for-loop. By exploring multiple possibilities, the model learns to distribute its guesses across different modes rather than collapsing to their uninformative average. The paper demonstrates that "exploration" acts as a new, powerful scaling axis. Gains from XM increase with model size, data scale, and compute. Experiments show improvements in FID scores for image generation and significant efficiency gains, sometimes outperforming larger models without exploration. When pushed to the limit, XM enables fully single-step, end-to-end generative models. In robotics tasks, an "Explorative Policy" matched the performance of a 100-step Diffusion Policy with a single forward pass, drastically improving inference speed. While the best-of-K concept is not entirely new, the authors' contribution lies in formally understanding it as a direct method to boost generative expressivity without fragmenting the generation process. This work suggests that as models scale, enhancing exploration during training may become crucial for overcoming fundamental performance bottlenecks.

marsbit1 h fa

Can Generative Models Finally Be Trained End-to-End? The Core Is a For Loop

marsbit1 h fa

Trading

Spot