Trust Wallet Hacked: What Crypto Users Should Do Now

bitcoinistОпубликовано 2025-12-26Обновлено 2025-12-26

Введение

Trust Wallet has confirmed a security incident specifically affecting its Chrome browser extension version 2.68, advising users to immediately disable and upgrade to version 2.69. Mobile-only users and those on other extension versions are not impacted. The breach was first flagged by on-chain investigator ZachXBT, who reported multiple users had funds drained. Cybersecurity firm PeckShield estimates losses exceeded $6 million, with a portion sent to centralized exchanges. Trust Wallet is directing affected users to contact support, and Binance founder Changpeng Zhao has stated that Trust Wallet will cover the estimated $7 million in losses. Users are urged to update their extensions and avoid using version 2.68 until upgraded.

Trust Wallet says a “security incident” hit only one slice of its product stack: the Chrome browser extension on version 2.68. If you are a mobile-only user, the company says you’re not affected. If you are on any other extension version, the company says you’re not affected either. The problem, per Trust Wallet’s own wording, is tightly scoped, even if the fallout doesn’t feel that way when you’re staring at an emptied address.

The first public flare went up on Dec. 25 via on-chain investigator ZachXBT, who posted a Telegram warning that “a number of Trust Wallet users have reported that funds were drained from wallet addresses within the past couple of hours.”

He stressed that “the exact root cause has not been determined,” then pointed out an uncomfortable coincidence: “the Trust Wallet Chrome extension pushed a new update yesterday.” In the same message, he asked victims to DM him on X so he could “update the list of theft addresses below as I verify more,” and he began publishing alleged theft destinations across multiple chains. His list included multiple EVM addresses and a Solana address.

Trust Wallet Confirms The Hack

The wallet firm later confirmed the incident on X. “We’ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69,” the company wrote, linking users to the official Chrome Web Store listing.

It added: “Please note: Mobile-only users and all other browser extension versions are not impacted.” The post closed with the kind of line every security team ends up typing sooner or later: “We understand how concerning this is and our team is actively working on the issue. We’ll keep sharing updates as soon as possible.”

Then the guidance got more urgent, and more specific. Trust Wallet warned users who hadn’t updated to 2.69: “please do not open the Browser Extension until you have updated. This may help to ensure the security of your wallet and prevent further issues.”

In a follow-up, it spelled out a step-by-step that boils down to: don’t open the extension, go to Chrome’s extensions page for Trust Wallet, toggle it off if it’s still on, enable Developer mode, hit “Update,” and confirm you’re on version 2.69 before doing anything else. It’s not glamorous, but it’s actionable, which is what matters when you’re in incident mode.

As the claims and counterclaims swirled, cybersecurity firm PeckShield put an early dollar figure on the damage. “The Trust Wallet exploit has drained >$6M worth of cryptos from victims,” PeckShield wrote, adding that while about “~$2.8M of the stolen funds remain in the hacker’s wallets (Bitcoin/EVM/Solana), the bulk – >$4M in cryptos – has been sent to CEXs,” with a breakdown of “~$3.3M to ChangeNOW, ~$340K to Fixed Float, & ~$447K to Kucoin.”

One more pressure point surfaced quickly: compensation. ZachXBT said, “I currently have many concerned victims contacting me via DM so can your team please clarify if you will be offering any compensation for Trust Wallet Browser Extension users.” Trust Wallet did not answer that directly in public. Instead, it replied that its customer support team was already in touch with impacted users regarding next steps and directed people to reach out via its support channel.

So what should users do now, in plain terms? If you are on extension version 2.68, Trust Wallet’s instruction is to stop using it as-is: disable it and upgrade to 2.69 before you open it again. If you think you were affected, the company is routing users to support, while independent investigator ZachXBT is asking for reports to help map theft flows.

UPDATE: Binance founder Changpeng Zhao confirmed via X that user will be compensated for the hack. “So far, $7m affected by this hack. Trust Wallet will cover. User funds are SAFU. Appreciate your understanding for any inconveniences caused. The team is still investigating how hackers were able to submit a new version,” Zhao wrote today.

At press time, the total crypto market cap stood at $2.95 trillion.

Total crypto market cap sits below the 2021 high, 1-week chart | Source: TOTAL on TradingView.com

Связанные с этим вопросы

QWhich specific version of the Trust Wallet extension was affected by the security incident?

AThe security incident affected Trust Wallet Browser Extension version 2.68 only.

QWhat is the primary action users of the affected extension version should take immediately?

AUsers on version 2.68 should disable the extension and upgrade to version 2.69 before opening it again.

QAccording to cybersecurity firm PeckShield, what was the estimated value of crypto drained in the exploit?

APeckShield reported that the exploit drained over $6 million worth of cryptocurrencies from victims.

QWho first publicly reported the potential issue with Trust Wallet on December 25th?

AOn-chain investigator ZachXBT first reported the issue via a Telegram warning.

QDid Trust Wallet or its parent company commit to compensating affected victims?

AYes, Binance founder Changpeng Zhao confirmed via X that Trust Wallet would cover the losses, stating that user funds are SAFU.

Похожее

Morning Post | Bitmine Plans to Raise $300 Million Through Preferred Stock Issuance; Polymarket Accuses Kalshi of Commercial Espionage

ChainCatcher's Daily Crypto Brief: Key developments from the past 24 hours include significant funding moves, regulatory actions, and market predictions. Bitmine announced a $300 million preferred stock fundraising. Polymarket accused rival prediction platform Kalshi of corporate espionage, citing numerous suspicious coincidences in product launches, a claim Kalshi strongly denied. The U.S. Department of Justice, in a joint "Disruption Week" anti-fraud operation with companies like Coinbase and Meta, froze over $3.8 million in cryptocurrency linked to scams. In infrastructure news, Macau completed its integration with the multi-central bank digital currency bridge, mBridge, aiming to build efficient cross-border payment channels. Cosmos Labs acquired the block explorer Mintscan. Market-wise, Geoffrey Kendrick, Standard Chartered's Head of Digital Assets Research, stated Bitcoin is nearing a bottom around $63,000, maintaining a year-end target of $100,000. He noted stability in U.S. spot Bitcoin ETF holdings. Ahead of SpaceX's anticipated IPO, internal insiders at Rocket Lab (RKLB) sold over $18.41 million in stock. In tokenization, Goldman Sachs partnered with Apex and Archax to launch a tokenized real estate fund. The meme token tracker GMGN reported the top trending tokens: on Ethereum, HEX, SHIB, LINK, PEPE, mUSD; on Solana, TROLL, swarms, WORLDCUP, neet, Buttcoin; and on Base, PEPE, toby, ODDS, ELSA, SKI.

链捕手12 мин. назад

Morning Post | Bitmine Plans to Raise $300 Million Through Preferred Stock Issuance; Polymarket Accuses Kalshi of Commercial Espionage

链捕手12 мин. назад

55TB to 28TB? The Rumor and Panic Behind Rubin's Memory Being Halved

Title: 55TB to 28TB? The Rumor and Panic Behind the Potential Halving of Rubin's Memory. On June 4th, a report from SemiAnalysis suggested NVIDIA's next-gen Vera Rubin NVL72 AI rack may ship with roughly 28TB of SOCAMM DRAM per rack instead of the anticipated 55TB, primarily using 96GB modules. This sparked a market panic, causing Micron's stock to drop over 10% on fears of halved memory demand. However, the article argues this panic is misguided for several key reasons. First, SOCAMM modules are socketed and upgradeable, not soldered. Lower initial configuration doesn't mean permanent demand loss. Second, the primary driver is a severe 2026 LPDDR5X supply shortage, not diminished need. NVIDIA is likely prioritizing rack shipments with available components. Third, with fixed total LPDDR5X supply, using less per rack could allow NVIDIA to ship *more* racks, not necessarily reducing overall memory orders. Micron's sharp drop was also attributed to a broader semiconductor sell-off triggered by Broadcom's earnings, with the SemiAnalysis report providing a convenient narrative for profit-taking after Micron's massive rally. In summary: the report on lower default configurations is likely accurate, but interpreting it as a demand collapse is wrong. The real risk for Micron lies in its reportedly minimal HBM4 share for Rubin, not in potentially flexible SOCAMM demand. The sell-off appears more like a correction amplified by coinciding negative catalysts.

marsbit29 мин. назад

55TB to 28TB? The Rumor and Panic Behind Rubin's Memory Being Halved

marsbit29 мин. назад

Exclusive from Yingke | Tang Wenbin's 'Yuanli Lingji' Merges with Logistics Robotics Company, and Secures Investment from Zhipu, SenseTime, Jieyue, and Others

Exclusive report: Embodied AI company "Yuanli Lingji" recently completed a new round of financing from major AI model firms including Zhipu AI, Stepfun, and SenseTime, alongside continued investments from industrial backers like Huaqin and SAIC Hengxu. Founded in March 2025 by Tang Wenbin, former co-founder and CTO of Megvii, Yuanli Lingji is a general-purpose embodied AI model company. In a notable move, the company has merged with logistics robotics firm "Atomix" (formerly known as Yuanli Juhe) through a share acquisition. Atomix, which originated from Megvii's logistics robotics business led by Tang in 2016 and was spun off in July 2024, has grown to become the world's second-largest supplier of pallet shuttle robots, with annual revenue nearing 1 billion RMB and over 500 projects globally for clients like Uniqlo and CATL. This merger aims to break the industry's "data deadlock" by combining Atomix's extensive real-world operational data from more than 20 countries with Yuanli Lingji's model training capabilities. The company's embodied AI model "DM0" utilizes a cross-domain training approach, integrating internet semantics, autonomous driving rules, and robotics data to achieve hardware-agnostic, precise manipulation even with a compact 2.4B parameter size. The collective investment from key AI players and the strategic merger signal a shift in the competitive landscape, as major model companies pivot from language tokens to physical actions ("from Token to Action"). The industry is entering a consolidation phase where hardware, AI models, data, and application scenarios converge to scale embodied intelligence, a trend mirrored by recent moves from giants like ByteDance and Skild AI.

marsbit37 мин. назад

Exclusive from Yingke | Tang Wenbin's 'Yuanli Lingji' Merges with Logistics Robotics Company, and Secures Investment from Zhipu, SenseTime, Jieyue, and Others

marsbit37 мин. назад

U.S. Stock Market Trends: Dow Hits New High, Nasdaq Falls, Whom Did Broadcom's Slap Wake Up?

U.S. Stocks Split: Dow Hits Record High as Nasdaq Slips; Broadcom's Plunge Sparks Rotation On June 4, the U.S. stock market saw a sharp divergence. The Dow Jones surged 875 points (+1.73%) to a record high of 51,561.93, while the Nasdaq Composite edged down 0.09%. The S&P 500 rose 0.41%. The primary catalyst was a sharp sell-off in AI-related chip stocks, led by Broadcom (AVGO). Despite reporting a 143% year-over-year jump in AI semiconductor revenue to $10.8 billion, the company's shares plunged about 14%. This was triggered by its maintained long-term AI revenue target, which failed to meet heightened expectations for a stock that had gained 55% this quarter and traded at a high P/E ratio. The slide dragged down the broader semiconductor sector and the technology板块. Conversely, money rotated into sectors like Healthcare (+3.14%), Financials (+2.67%), and Real Estate (+1.87%). UnitedHealth and Goldman Sachs were major contributors to the Dow's gains. The rotation was attributed to a search for value outside overheated tech names and a slight dip in Treasury yields. In other major news, SpaceX confirmed its IPO for June 12, targeting a record $75 billion raise at a ~$1.75 trillion valuation. Additionally, initial jobless claims rose to a four-month high, adding nuance to the labor market narrative ahead of the key May non-farm payrolls report. The day's action signaled that while the AI growth story remains intact, excessive valuations are prompting a market reassessment. Funds are moving, at least temporarily, from high-flying tech to more defensive and value-oriented sectors. The sustainability of this rotation hinges on upcoming economic data, particularly the jobs report, and the market's absorption of the massive SpaceX IPO.

marsbit40 мин. назад

U.S. Stock Market Trends: Dow Hits New High, Nasdaq Falls, Whom Did Broadcom's Slap Wake Up?

marsbit40 мин. назад

From 'Old Dogs' to 'New Darlings': How AI is Revaluing Old Infrastructure, from Dell to Nokia

"Old Dogs" Become AI's New Darlings: Revaluing Legacy Infrastructure The AI investment narrative is shifting. Beyond the spotlight on core chipmakers like Nvidia, a new wave of interest is rising for legacy tech companies—Dell, HPE, Nokia, Cisco, Corning, Western Digital—once labeled as slow-growth, outdated stories. This resurgence stems from AI's evolution from model development to real-world deployment, creating massive demand for physical infrastructure. As AI moves into data center construction and enterprise adoption, the focus turns to who can actually build and deliver complex systems. These established players hold decades of experience in supply chains, integration, networking, and enterprise delivery—assets now critical for scaling AI. The revaluation can be grouped into three key infrastructure areas: 1. **Servers & Integration (e.g., Dell, HPE):** They are becoming essential system integrators, transforming GPUs into full-scale AI servers with networking, power, and cooling, then delivering them to clients. Strong recent earnings and AI-specific revenue/order growth for Dell and HPE underscore this shift. 2. **Networking & Connectivity (e.g., Corning, Nokia, Cisco):** As AI clusters grow, high-speed data transfer becomes paramount. Corning benefits from fiber demand for data center links, Nokia is exploring AI-integrated wireless networks (AI-RAN), and Cisco sees surging orders for data center switches—all critical for efficient AI operations. 3. **Storage (e.g., Western Digital, Seagate):** The AI data explosion requires vast capacity. Beyond high-speed memory (HBM), there's growing need for high-capacity HDDs to store training data, logs, video, and cold/archival data cost-effectively. This revaluation, however, is not a blanket endorsement. True reassessment requires concrete proof: AI-driven orders and revenue growth, upward revisions to company guidance, and sustainable improvements in profit quality, not just top-line sales. In essence, AI is not turning all old tech firms into high-growth stocks; it is selectively re-pricing the "old assets" of companies that are mission-critical for building the new AI infrastructure, transforming their legacy capabilities into renewed growth engines.

marsbit49 мин. назад

From 'Old Dogs' to 'New Darlings': How AI is Revaluing Old Infrastructure, from Dell to Nokia

marsbit49 мин. назад

Торговля

Спот
Фьючерсы
活动图片

Популярные категорииright-arrow

Популярные тегиright-arrow