Trust Wallet Hacked: What Crypto Users Should Do Now

bitcoinistОпубликовано 2025-12-26Обновлено 2025-12-26

Введение

Trust Wallet has confirmed a security incident specifically affecting its Chrome browser extension version 2.68, advising users to immediately disable and upgrade to version 2.69. Mobile-only users and those on other extension versions are not impacted. The breach was first flagged by on-chain investigator ZachXBT, who reported multiple users had funds drained. Cybersecurity firm PeckShield estimates losses exceeded $6 million, with a portion sent to centralized exchanges. Trust Wallet is directing affected users to contact support, and Binance founder Changpeng Zhao has stated that Trust Wallet will cover the estimated $7 million in losses. Users are urged to update their extensions and avoid using version 2.68 until upgraded.

Trust Wallet says a “security incident” hit only one slice of its product stack: the Chrome browser extension on version 2.68. If you are a mobile-only user, the company says you’re not affected. If you are on any other extension version, the company says you’re not affected either. The problem, per Trust Wallet’s own wording, is tightly scoped, even if the fallout doesn’t feel that way when you’re staring at an emptied address.

The first public flare went up on Dec. 25 via on-chain investigator ZachXBT, who posted a Telegram warning that “a number of Trust Wallet users have reported that funds were drained from wallet addresses within the past couple of hours.”

He stressed that “the exact root cause has not been determined,” then pointed out an uncomfortable coincidence: “the Trust Wallet Chrome extension pushed a new update yesterday.” In the same message, he asked victims to DM him on X so he could “update the list of theft addresses below as I verify more,” and he began publishing alleged theft destinations across multiple chains. His list included multiple EVM addresses and a Solana address.

Trust Wallet Confirms The Hack

The wallet firm later confirmed the incident on X. “We’ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69,” the company wrote, linking users to the official Chrome Web Store listing.

It added: “Please note: Mobile-only users and all other browser extension versions are not impacted.” The post closed with the kind of line every security team ends up typing sooner or later: “We understand how concerning this is and our team is actively working on the issue. We’ll keep sharing updates as soon as possible.”

Then the guidance got more urgent, and more specific. Trust Wallet warned users who hadn’t updated to 2.69: “please do not open the Browser Extension until you have updated. This may help to ensure the security of your wallet and prevent further issues.”

In a follow-up, it spelled out a step-by-step that boils down to: don’t open the extension, go to Chrome’s extensions page for Trust Wallet, toggle it off if it’s still on, enable Developer mode, hit “Update,” and confirm you’re on version 2.69 before doing anything else. It’s not glamorous, but it’s actionable, which is what matters when you’re in incident mode.

As the claims and counterclaims swirled, cybersecurity firm PeckShield put an early dollar figure on the damage. “The Trust Wallet exploit has drained >$6M worth of cryptos from victims,” PeckShield wrote, adding that while about “~$2.8M of the stolen funds remain in the hacker’s wallets (Bitcoin/EVM/Solana), the bulk – >$4M in cryptos – has been sent to CEXs,” with a breakdown of “~$3.3M to ChangeNOW, ~$340K to Fixed Float, & ~$447K to Kucoin.”

One more pressure point surfaced quickly: compensation. ZachXBT said, “I currently have many concerned victims contacting me via DM so can your team please clarify if you will be offering any compensation for Trust Wallet Browser Extension users.” Trust Wallet did not answer that directly in public. Instead, it replied that its customer support team was already in touch with impacted users regarding next steps and directed people to reach out via its support channel.

So what should users do now, in plain terms? If you are on extension version 2.68, Trust Wallet’s instruction is to stop using it as-is: disable it and upgrade to 2.69 before you open it again. If you think you were affected, the company is routing users to support, while independent investigator ZachXBT is asking for reports to help map theft flows.

UPDATE: Binance founder Changpeng Zhao confirmed via X that user will be compensated for the hack. “So far, $7m affected by this hack. Trust Wallet will cover. User funds are SAFU. Appreciate your understanding for any inconveniences caused. The team is still investigating how hackers were able to submit a new version,” Zhao wrote today.

At press time, the total crypto market cap stood at $2.95 trillion.

Total crypto market cap sits below the 2021 high, 1-week chart | Source: TOTAL on TradingView.com

Связанные с этим вопросы

QWhich specific version of the Trust Wallet extension was affected by the security incident?

AThe security incident affected Trust Wallet Browser Extension version 2.68 only.

QWhat is the primary action users of the affected extension version should take immediately?

AUsers on version 2.68 should disable the extension and upgrade to version 2.69 before opening it again.

QAccording to cybersecurity firm PeckShield, what was the estimated value of crypto drained in the exploit?

APeckShield reported that the exploit drained over $6 million worth of cryptocurrencies from victims.

QWho first publicly reported the potential issue with Trust Wallet on December 25th?

AOn-chain investigator ZachXBT first reported the issue via a Telegram warning.

QDid Trust Wallet or its parent company commit to compensating affected victims?

AYes, Binance founder Changpeng Zhao confirmed via X that Trust Wallet would cover the losses, stating that user funds are SAFU.

Похожее

If You’re Waiting For The Bitcoin Bottom, This Pundit Says You Should Be Looking At This Quarter

Bitcoin is currently testing the $60,000 support level, with market sentiment in "extreme fear." Crypto analyst Ardi points to a historical pattern where Bitcoin has bottomed in the fourth quarter during previous bear market cycles (e.g., November 2014, December 2018, November 2022). Given that it's only the second quarter of 2026, this suggests the current correction may not yet be over. The current correction is 245 days old, shorter than previous cycles. Other analysts like Benjamin Cowen, Ali Martinez, and CryptoQuant also align on a late 2026 bottom (around October-December), citing cycle durations and technical indicators. BTC is currently trading near $63,000, down over 6% in 24 hours and at risk of breaking below $60,000 due to ongoing ETF outflows.

bitcoinist44 мин. назад

If You’re Waiting For The Bitcoin Bottom, This Pundit Says You Should Be Looking At This Quarter

bitcoinist44 мин. назад

Should You Buy SpaceX Stock at $1.7 Trillion? Here's What the Market Is Worried About

SpaceX is preparing for a massive IPO aiming to raise around $75 billion at a valuation of approximately $1.75 trillion. While its achievements in reusable rockets and the profitable Starlink satellite internet service are clear, the market is concerned about the aggressive valuation. Key issues include: the current $1.75 trillion valuation, which is about 94 times 2025 revenue, seems to price in not just existing businesses but also unproven future ventures like AI infrastructure and orbital data centers. Financially, while Starlink is profitable, the AI division, bolstered by the acquisition of xAI, is incurring massive losses and consuming the majority of capital expenditures. This acquisition also introduced complex related-party financing arrangements and debt onto SpaceX's balance sheet. Furthermore, corporate governance poses a challenge. SpaceX's dual-class share structure ensures founder Elon Musk retains absolute control, limiting ordinary shareholders' influence over high-risk, long-term strategic decisions. The future success of ambitious projects like the Starship rocket—critical for lowering costs and enabling new services—remains a significant variable for the valuation. In summary, the market's apprehension (FUD) centers not on doubting SpaceX's past technological triumphs but on questioning how much premium public investors should pay for a future that combines proven profits with highly speculative and capital-intensive new ventures, all under a governance structure that offers limited shareholder oversight.

marsbit54 мин. назад

Should You Buy SpaceX Stock at $1.7 Trillion? Here's What the Market Is Worried About

marsbit54 мин. назад

Breaking the DeFi Cascading Liquidation Curse: Vitalik Proposes a New Solution

Vitalik Buterin has proposed a new DeFi design to eliminate the automatic liquidation mechanism that causes market instability during sharp downturns. The current system, used by protocols like Aave, triggers forced sales when collateral value falls below a threshold, often exacerbating price drops and creating systemic selling pressure. Buterin's alternative model is based on splitting an asset like ETH into two synthetic option-like tokens, P and N, pegged to a price index. Their combined value always equals one ETH. Instead of sudden liquidation, a position's value gradually drifts from its target peg if the market moves. Users must proactively rebalance their holdings to maintain their desired exposure, transferring the management burden from the protocol to the user or automated tools. A key advantage is the reduced reliance on real-time oracles. Pricing decisions are deferred until contract expiry, allowing for more robust, fault-tolerant oracle designs. This removes a clear liquidation threshold that speculators can target for manipulation or MEV extraction. However, significant challenges remain. Frequent rebalancing could incur high slippage and transaction costs, necessitating new liquidity provider models. The design is better suited for hedging instruments than for stablecoins requiring a rigid 1:1 peg. While not an immediate replacement for existing systems, the proposal challenges the foundational assumption that instantaneous forced liquidation is an unavoidable necessity in DeFi, opening the door for fundamentally different risk management architectures.

marsbit58 мин. назад

Breaking the DeFi Cascading Liquidation Curse: Vitalik Proposes a New Solution

marsbit58 мин. назад

The End of Single-Factor Cryptography

The article "The End of Single-Factor Crypto" posits a fundamental shift in the cryptocurrency ecosystem. It argues the era where crypto asset valuations were predominantly driven by, and correlated with, Bitcoin's price is ending. The space is bifurcating into two distinct economies: endogenous and exogenous. The endogenous economy represents traditional crypto, where token and project values are directly tied to crypto market prices. The emerging exogenous economy comprises projects and businesses that may utilize blockchain technology or tokens but derive their fundamental value from external, non-crypto factors like consumer demand, subscription revenue, or real-world utility. Examples include AI inference platforms like Venice, fintech lenders using blockchain for efficiency, and stablecoin/payment infrastructure companies acquired by giants like Mastercard and Stripe. This shift means investment analysis must change. For exogenous assets, evaluating traditional business fundamentals—such as revenue streams, unit economics, and competitive moats—becomes more critical than tracking Bitcoin charts. While endogenous assets like Bitcoin remain relevant, the growth of the exogenous category is driven by measurable demand independent of crypto price cycles, paving the way for a new, more diversified market phase. Consequently, crypto is evolving from a single-factor, reflexive asset class into a multifaceted ecosystem with varied drivers and investment theses.

marsbit59 мин. назад

The End of Single-Factor Cryptography

marsbit59 мин. назад

Morning Post | Bitmine Plans to Raise $300 Million Through Preferred Stock Issuance; Polymarket Accuses Kalshi of Commercial Espionage

ChainCatcher's Daily Crypto Brief: Key developments from the past 24 hours include significant funding moves, regulatory actions, and market predictions. Bitmine announced a $300 million preferred stock fundraising. Polymarket accused rival prediction platform Kalshi of corporate espionage, citing numerous suspicious coincidences in product launches, a claim Kalshi strongly denied. The U.S. Department of Justice, in a joint "Disruption Week" anti-fraud operation with companies like Coinbase and Meta, froze over $3.8 million in cryptocurrency linked to scams. In infrastructure news, Macau completed its integration with the multi-central bank digital currency bridge, mBridge, aiming to build efficient cross-border payment channels. Cosmos Labs acquired the block explorer Mintscan. Market-wise, Geoffrey Kendrick, Standard Chartered's Head of Digital Assets Research, stated Bitcoin is nearing a bottom around $63,000, maintaining a year-end target of $100,000. He noted stability in U.S. spot Bitcoin ETF holdings. Ahead of SpaceX's anticipated IPO, internal insiders at Rocket Lab (RKLB) sold over $18.41 million in stock. In tokenization, Goldman Sachs partnered with Apex and Archax to launch a tokenized real estate fund. The meme token tracker GMGN reported the top trending tokens: on Ethereum, HEX, SHIB, LINK, PEPE, mUSD; on Solana, TROLL, swarms, WORLDCUP, neet, Buttcoin; and on Base, PEPE, toby, ODDS, ELSA, SKI.

链捕手1 ч. назад

Morning Post | Bitmine Plans to Raise $300 Million Through Preferred Stock Issuance; Polymarket Accuses Kalshi of Commercial Espionage

链捕手1 ч. назад

Торговля

Спот
Фьючерсы
活动图片

Популярные категорииright-arrow

Популярные тегиright-arrow