Trust Wallet Hacked: What Crypto Users Should Do Now

bitcoinistPublicado em 2025-12-26Última atualização em 2025-12-26

Resumo

Trust Wallet has confirmed a security incident specifically affecting its Chrome browser extension version 2.68, advising users to immediately disable and upgrade to version 2.69. Mobile-only users and those on other extension versions are not impacted. The breach was first flagged by on-chain investigator ZachXBT, who reported multiple users had funds drained. Cybersecurity firm PeckShield estimates losses exceeded $6 million, with a portion sent to centralized exchanges. Trust Wallet is directing affected users to contact support, and Binance founder Changpeng Zhao has stated that Trust Wallet will cover the estimated $7 million in losses. Users are urged to update their extensions and avoid using version 2.68 until upgraded.

Trust Wallet says a “security incident” hit only one slice of its product stack: the Chrome browser extension on version 2.68. If you are a mobile-only user, the company says you’re not affected. If you are on any other extension version, the company says you’re not affected either. The problem, per Trust Wallet’s own wording, is tightly scoped, even if the fallout doesn’t feel that way when you’re staring at an emptied address.

The first public flare went up on Dec. 25 via on-chain investigator ZachXBT, who posted a Telegram warning that “a number of Trust Wallet users have reported that funds were drained from wallet addresses within the past couple of hours.”

He stressed that “the exact root cause has not been determined,” then pointed out an uncomfortable coincidence: “the Trust Wallet Chrome extension pushed a new update yesterday.” In the same message, he asked victims to DM him on X so he could “update the list of theft addresses below as I verify more,” and he began publishing alleged theft destinations across multiple chains. His list included multiple EVM addresses and a Solana address.

Trust Wallet Confirms The Hack

The wallet firm later confirmed the incident on X. “We’ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69,” the company wrote, linking users to the official Chrome Web Store listing.

It added: “Please note: Mobile-only users and all other browser extension versions are not impacted.” The post closed with the kind of line every security team ends up typing sooner or later: “We understand how concerning this is and our team is actively working on the issue. We’ll keep sharing updates as soon as possible.”

Then the guidance got more urgent, and more specific. Trust Wallet warned users who hadn’t updated to 2.69: “please do not open the Browser Extension until you have updated. This may help to ensure the security of your wallet and prevent further issues.”

In a follow-up, it spelled out a step-by-step that boils down to: don’t open the extension, go to Chrome’s extensions page for Trust Wallet, toggle it off if it’s still on, enable Developer mode, hit “Update,” and confirm you’re on version 2.69 before doing anything else. It’s not glamorous, but it’s actionable, which is what matters when you’re in incident mode.

As the claims and counterclaims swirled, cybersecurity firm PeckShield put an early dollar figure on the damage. “The Trust Wallet exploit has drained >$6M worth of cryptos from victims,” PeckShield wrote, adding that while about “~$2.8M of the stolen funds remain in the hacker’s wallets (Bitcoin/EVM/Solana), the bulk – >$4M in cryptos – has been sent to CEXs,” with a breakdown of “~$3.3M to ChangeNOW, ~$340K to Fixed Float, & ~$447K to Kucoin.”

One more pressure point surfaced quickly: compensation. ZachXBT said, “I currently have many concerned victims contacting me via DM so can your team please clarify if you will be offering any compensation for Trust Wallet Browser Extension users.” Trust Wallet did not answer that directly in public. Instead, it replied that its customer support team was already in touch with impacted users regarding next steps and directed people to reach out via its support channel.

So what should users do now, in plain terms? If you are on extension version 2.68, Trust Wallet’s instruction is to stop using it as-is: disable it and upgrade to 2.69 before you open it again. If you think you were affected, the company is routing users to support, while independent investigator ZachXBT is asking for reports to help map theft flows.

UPDATE: Binance founder Changpeng Zhao confirmed via X that user will be compensated for the hack. “So far, $7m affected by this hack. Trust Wallet will cover. User funds are SAFU. Appreciate your understanding for any inconveniences caused. The team is still investigating how hackers were able to submit a new version,” Zhao wrote today.

At press time, the total crypto market cap stood at $2.95 trillion.

Total crypto market cap sits below the 2021 high, 1-week chart | Source: TOTAL on TradingView.com

Perguntas relacionadas

QWhich specific version of the Trust Wallet extension was affected by the security incident?

AThe security incident affected Trust Wallet Browser Extension version 2.68 only.

QWhat is the primary action users of the affected extension version should take immediately?

AUsers on version 2.68 should disable the extension and upgrade to version 2.69 before opening it again.

QAccording to cybersecurity firm PeckShield, what was the estimated value of crypto drained in the exploit?

APeckShield reported that the exploit drained over $6 million worth of cryptocurrencies from victims.

QWho first publicly reported the potential issue with Trust Wallet on December 25th?

AOn-chain investigator ZachXBT first reported the issue via a Telegram warning.

QDid Trust Wallet or its parent company commit to compensating affected victims?

AYes, Binance founder Changpeng Zhao confirmed via X that Trust Wallet would cover the losses, stating that user funds are SAFU.

Leituras Relacionadas

XRPL Foundation Director Warns Of Fake XRP Holder Tiers Scam

XRPL Foundation Community Director Hussein "Vet" Zangana has issued a warning about a phishing scam impersonating Ripple. The scam uses a fake "XRP Holder Tiers" announcement to trick users into connecting their crypto wallets, potentially leading to fund theft. Officials emphasize this is a social engineering attack and not a breach of Ripple's internal systems. The scam exploits common crypto user behaviors, such as urgency around airdrops and rewards, and the fear of missing out on loyalty benefits. Connecting a wallet to a malicious site can grant dangerous permissions or initiate draining transactions. XRP's large, active community makes it a frequent target for such impersonation campaigns. While public warnings from community figures are helpful, they are not a complete defense against evolving scams. The key safety takeaway is for users to ignore unsolicited reward announcements and never connect wallets through unofficial links. Any offer should be verified through multiple official channels before interaction.

bitcoinistHá 6m

XRPL Foundation Director Warns Of Fake XRP Holder Tiers Scam

bitcoinistHá 6m

Soaring 20% Then Dropping 5%: When Will the Bottom of the Korean Stock Market Be?

"South Korean stocks face a turbulent period as the KOSPI index, after a 20% surge, fell 5% to 6257 points. The market is grappling with severe issues: over 500,000 leveraged retail accounts have been liquidated, and more than 24 trillion won has flowed from stocks into bank deposits for safety. This reflects a significant loss of market liquidity and shaken investor confidence. In response, Korean financial regulators are taking action. They have tripled the minimum保证金 (margin) requirement for single-stock leveraged ETF trades to 30 million won and are considering granting themselves "emergency intervention" powers. These could include capping leverage ratios and setting investment limits on these ETFs, seen by many as amplifying market volatility. Initial results show a 75% drop in these products' trading volume post-regulation. The market downturn has political repercussions, pushing President Yoon Suk-yeol's approval rating to a new low. Meanwhile, foreign investors made a record net purchase of 7.18 trillion won during a recent rebound, while domestic retail investors sold off massively. Morgan Stanley has upgraded South Korean stocks to "overweight," citing the ongoing "leverage unwinding" and potential for a 36% upside, with giants like Samsung Electronics and SK Hynix providing valuation support. However, analysts caution that the market's structure remains vulnerable to foreign capital flows, and the current low may not be the bottom."

marsbitHá 10m

Soaring 20% Then Dropping 5%: When Will the Bottom of the Korean Stock Market Be?

marsbitHá 10m

Goldman Sachs Stakes a Clear Position: This Is the Largest Capital Demand Cycle in Human History, and the Fed Is Just an Observer

Goldman Sachs argues that the world is entering the most capital-intensive investment cycle in history, driven by concurrent massive demands from AI infrastructure, reindustrialization, defense reinvestment, power grid rebuilding, supply chain realignment, and sovereign debt financing. This structural competition for capital is pushing its cost higher, fundamentally altering investment paradigms. Goldman's Mark Wilson states that the Federal Reserve is merely a "passenger, not the driver" in this shift, with rising yields rooted in these real economy demands rather than just monetary policy. While major indices appeared calm in July, underlying market movements were historic, featuring extreme stock dispersion and a severe momentum factor crash, leading to significant de-risking by fund managers. Wilson cautions against expecting a quick reversal in August, citing ongoing digestion of higher rates, disrupted risk models, and typically muted market performance ahead of US midterm elections. Corporate fundamentals remain robust with strong earnings, though growth rates are peaking in the US while accelerating in Europe. Notably, hyperscale cloud companies like Amazon and Microsoft are announcing staggering capital expenditure projections for 2027-2028, justified by explosive AI-related revenue growth and high returns. Amazon revealed its AI revenue run-rate exceeds $25 billion, growing triple-digits annually, and expressed confidence that AWS could become a trillion-dollar revenue business. The report concludes that a transitional period is underway, marked by a growing tension between aggressively investing private tech giants and increasingly capital-constrained sovereign governments. The AI super-cycle continues, with August likely being a consolidation phase.

marsbitHá 15m

Goldman Sachs Stakes a Clear Position: This Is the Largest Capital Demand Cycle in Human History, and the Fed Is Just an Observer

marsbitHá 15m

Flowra Integrates Compliance Checks into Solana Blockchain

Flowra, an infrastructure platform for validators and order flow management on the Solana network, has partnered with compliance infrastructure provider Honeypot. The companies are integrating sanctions risk checks and other threat assessments directly into the block production process. This integration will combine Honeypot's compliance data with Flowra's Programmable Block Policy (PBP) system, enabling institutional validators to set custom rules for which transactions and bundles can be included in blocks. The system will screen wallet addresses linked to sanctioned entities and analyze network signals like VPN, proxy, and Tor exit node usage, reportedly identifying 31% to 61% of traffic using network obfuscation tools. Each validator will define its own compliance policy. The initial focus is on sanctions screening, wallet checks, and providing auditability for regulated financial institutions.

cryptonews.ruHá 16m

Flowra Integrates Compliance Checks into Solana Blockchain

cryptonews.ruHá 16m

Outflow of Stablecoins from South Korea Continues for 18 Consecutive Months, Exceeding $360 Million in June

In June 2026, South Korea experienced a net outflow of stablecoins to overseas crypto exchanges, amounting to 560.3 billion won ($367 million). This represents approximately 78% of the net value of foreign stocks purchased by Korean investors in the same period. According to the Financial Supervisory Service (FSS), this marks the 18th consecutive month of net outflows, a trend ongoing since January 2025. The FSS reported that 2.76 trillion won ($1.8+ billion) in stablecoins were withdrawn from the country's five major exchanges to foreign platforms in June, while 2.2 trillion won ($1.4 billion) flowed back in. The second quarter of 2026 saw a significant net outflow of 1.69 trillion won (~$1.1 billion), surpassing net sales of foreign stocks in the same period. Analysts cite access to unavailable domestic financial instruments as a primary driver. Foreign platforms offer crypto derivatives, spot and futures products tied to major Korean stocks like Samsung and Hyundai, along with RWA tokenization, DeFi, staking, and leveraged products. Lawmaker Lee Jong-wook warned that the stablecoin outflows constitute capital flight, exposing investors to risks on unregulated foreign platforms. He called for accelerated regulatory reform and enhanced investor protection measures. The government is reportedly working on a digital assets law to foster the blockchain sector.

cryptonews.ruHá 20m

Outflow of Stablecoins from South Korea Continues for 18 Consecutive Months, Exceeding $360 Million in June

cryptonews.ruHá 20m

Trading

Spot
活动图片

Categorias popularesright-arrow

Etiquetas Popularesright-arrow