Trust Wallet Hacked: What Crypto Users Should Do Now

bitcoinistОпубліковано о 2025-12-26Востаннє оновлено о 2025-12-26

Анотація

Trust Wallet has confirmed a security incident specifically affecting its Chrome browser extension version 2.68, advising users to immediately disable and upgrade to version 2.69. Mobile-only users and those on other extension versions are not impacted. The breach was first flagged by on-chain investigator ZachXBT, who reported multiple users had funds drained. Cybersecurity firm PeckShield estimates losses exceeded $6 million, with a portion sent to centralized exchanges. Trust Wallet is directing affected users to contact support, and Binance founder Changpeng Zhao has stated that Trust Wallet will cover the estimated $7 million in losses. Users are urged to update their extensions and avoid using version 2.68 until upgraded.

Trust Wallet says a “security incident” hit only one slice of its product stack: the Chrome browser extension on version 2.68. If you are a mobile-only user, the company says you’re not affected. If you are on any other extension version, the company says you’re not affected either. The problem, per Trust Wallet’s own wording, is tightly scoped, even if the fallout doesn’t feel that way when you’re staring at an emptied address.

The first public flare went up on Dec. 25 via on-chain investigator ZachXBT, who posted a Telegram warning that “a number of Trust Wallet users have reported that funds were drained from wallet addresses within the past couple of hours.”

He stressed that “the exact root cause has not been determined,” then pointed out an uncomfortable coincidence: “the Trust Wallet Chrome extension pushed a new update yesterday.” In the same message, he asked victims to DM him on X so he could “update the list of theft addresses below as I verify more,” and he began publishing alleged theft destinations across multiple chains. His list included multiple EVM addresses and a Solana address.

Trust Wallet Confirms The Hack

The wallet firm later confirmed the incident on X. “We’ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69,” the company wrote, linking users to the official Chrome Web Store listing.

It added: “Please note: Mobile-only users and all other browser extension versions are not impacted.” The post closed with the kind of line every security team ends up typing sooner or later: “We understand how concerning this is and our team is actively working on the issue. We’ll keep sharing updates as soon as possible.”

Then the guidance got more urgent, and more specific. Trust Wallet warned users who hadn’t updated to 2.69: “please do not open the Browser Extension until you have updated. This may help to ensure the security of your wallet and prevent further issues.”

In a follow-up, it spelled out a step-by-step that boils down to: don’t open the extension, go to Chrome’s extensions page for Trust Wallet, toggle it off if it’s still on, enable Developer mode, hit “Update,” and confirm you’re on version 2.69 before doing anything else. It’s not glamorous, but it’s actionable, which is what matters when you’re in incident mode.

As the claims and counterclaims swirled, cybersecurity firm PeckShield put an early dollar figure on the damage. “The Trust Wallet exploit has drained >$6M worth of cryptos from victims,” PeckShield wrote, adding that while about “~$2.8M of the stolen funds remain in the hacker’s wallets (Bitcoin/EVM/Solana), the bulk – >$4M in cryptos – has been sent to CEXs,” with a breakdown of “~$3.3M to ChangeNOW, ~$340K to Fixed Float, & ~$447K to Kucoin.”

One more pressure point surfaced quickly: compensation. ZachXBT said, “I currently have many concerned victims contacting me via DM so can your team please clarify if you will be offering any compensation for Trust Wallet Browser Extension users.” Trust Wallet did not answer that directly in public. Instead, it replied that its customer support team was already in touch with impacted users regarding next steps and directed people to reach out via its support channel.

So what should users do now, in plain terms? If you are on extension version 2.68, Trust Wallet’s instruction is to stop using it as-is: disable it and upgrade to 2.69 before you open it again. If you think you were affected, the company is routing users to support, while independent investigator ZachXBT is asking for reports to help map theft flows.

UPDATE: Binance founder Changpeng Zhao confirmed via X that user will be compensated for the hack. “So far, $7m affected by this hack. Trust Wallet will cover. User funds are SAFU. Appreciate your understanding for any inconveniences caused. The team is still investigating how hackers were able to submit a new version,” Zhao wrote today.

At press time, the total crypto market cap stood at $2.95 trillion.

Total crypto market cap sits below the 2021 high, 1-week chart | Source: TOTAL on TradingView.com

Пов'язані питання

QWhich specific version of the Trust Wallet extension was affected by the security incident?

AThe security incident affected Trust Wallet Browser Extension version 2.68 only.

QWhat is the primary action users of the affected extension version should take immediately?

AUsers on version 2.68 should disable the extension and upgrade to version 2.69 before opening it again.

QAccording to cybersecurity firm PeckShield, what was the estimated value of crypto drained in the exploit?

APeckShield reported that the exploit drained over $6 million worth of cryptocurrencies from victims.

QWho first publicly reported the potential issue with Trust Wallet on December 25th?

AOn-chain investigator ZachXBT first reported the issue via a Telegram warning.

QDid Trust Wallet or its parent company commit to compensating affected victims?

AYes, Binance founder Changpeng Zhao confirmed via X that Trust Wallet would cover the losses, stating that user funds are SAFU.

Пов'язані матеріали

Breaking News: Full Detailed Rationale and Explanation of the Fed's Interest Rate Decision Released!

As expected, the Federal Reserve kept its key interest rate unchanged at 3.50-3.75 percent, marking the fifth consecutive meeting without a rate change. The Federal Open Market Committee's (FOMC) decision passed with a 9-3 majority vote. Cleveland Fed President Loretta Mester, Minneapolis Fed President Neel Kashkari, and Dallas Fed President Lorie Logan dissented, voting in favor of a 25 basis point rate hike. This was the first meeting since 2016 where three regional Fed presidents voted against holding rates steady, signaling growing influence among members advocating for tighter monetary policy to combat inflation. The Fed's statement noted that economic activity has been expanding at a solid pace despite high uncertainty, partly due to Middle East conflicts. It highlighted that growth in productivity and investment remained strong, employment gains have aligned with labor force growth, and the unemployment rate has remained relatively stable. The Fed also committed to maintaining ample reserves in the banking system. The statement emphasized that inflation remains above the Fed's 2% target. It noted that supply shocks, including in the energy sector, are adding to inflationary pressures. The Committee stated it will continue to closely monitor incoming data and risks in pursuit of its price stability goal. The dissenting members argued that the target range for the federal funds rate should have been increased by 25 basis points.

cryptonews.ru13 хв тому

Breaking News: Full Detailed Rationale and Explanation of the Fed's Interest Rate Decision Released!

cryptonews.ru13 хв тому

The Fed's Interest Rate Decision is Inevitable! Former Senior Fed Advisor Reveals His Forecast for Today!

Former Federal Reserve senior advisor John Faust stated he does not expect the Fed to raise interest rates at the FOMC meeting concluding today. He argued the Fed will not try to win credibility by deliberately surprising markets. In his assessment, Faust noted that Fed Chairman Kevin Warsh has used strong rhetoric on restoring price stability but largely failed to share details on how he plans to achieve it. This information gap has led to various market scenarios. However, Faust believes the reality is simpler: Warsh positions himself as a pragmatic, tough-minded policymaker, placing high importance on monetary policy communication while showing flexibility regarding balance sheet reduction. Faust compared Warsh's approach to the "refined intuitive approach" used by former Chairman Alan Greenspan. Faust stated that, unlike strict policy rules, this approach does not yield clear-cut answers on rate decisions. In current conditions, both a 25-basis-point hike and waiting for the next meeting could be reasonably justified. Aligning with market expectations, Faust predicts the Fed will choose to wait today. He believes the benefit of waiting outweighs the negatives, partly because he agrees that deliberately surprising markets to boost credibility is not a valid factor. Faust also argued there is no substantial macroeconomic difference between hiking today and holding steady, as a 25-basis-point move over eight weeks alone is not economically decisive. He emphasized that the important aspect will not be the decision itself, but how it is explained to markets. Warsh has so far advocated forward-looking policy without clear guidance on economic forecasts or the likely rate path. Faust warned that if the Fed does not explicitly state grounds for a hike and opts to wait for more data, markets may misinterpret the decision's meaning. Regardless of today's outcome, how Warsh explains the policy decisions at the meeting and press conference may be the most critical information for investors.

cryptonews.ru47 хв тому

The Fed's Interest Rate Decision is Inevitable! Former Senior Fed Advisor Reveals His Forecast for Today!

cryptonews.ru47 хв тому

Торгівля

Спот
活动图片