Trust Wallet Users Lost $7 Million in Cryptocurrency Due to Hack

RBK-cryptoОпубліковано о 2025-12-26Востаннє оновлено о 2025-12-26

Анотація

On December 26, the team behind Trust Wallet, a popular cryptocurrency wallet owned by Binance, reported a security breach affecting the browser extension version 2.68. According to Binance founder Changpeng Zhao, the incident was the result of a hack, resulting in losses of approximately $7 million. Users of the compromised version were advised to disable or uninstall it and upgrade to the secure version 2.69. The breach did not impact the mobile application. Trust Wallet's native token (TWT) initially dropped around 7% in price but recovered after the official announcement. Zhao stated that Trust Wallet would cover all user losses and urged affected individuals to contact support. Although no official cause was confirmed, reports suggest that version 2.68 contained hidden malicious code that intercepted users' secret recovery phrases during wallet imports, sending them to an external server. This allowed attackers to gain full access to affected wallets. Some community members, including Zhao, suspect the breach may have been an inside job involving a team member.

On the night of December 26, the team of the popular cryptocurrency wallet Trust Wallet reported a security breach that affected the browser application version 2.68. As explained by Binance founder and head of YZi Labs, which owns Trust Wallet, Changpeng Zhao, the incident occurred as a result of a hacker attack, and the damage amounted to $7 million.

Users of version 2.68 should disable or delete this build and only then install the new version 2.69, and under no circumstances should they open or use the unsafe version. The hack only concerns the browser version 2.68 and did not affect the mobile application.

The native token of Trust Wallet (TWT) reacted with a price drop of about 7%, falling for three hours before the team's announcement around 01:20 Moscow time on December 26. After the official announcement, the TWT price recovered to previous levels and the asset is trading slightly below $0.83.

Zhao stated that Trust Wallet will cover all user losses, and affected users were asked to write to the wallet's support service, a link to which can be found on the official website.

No official statements have been made regarding the causes of the hack. But its essence, according to a report by user Akinator on social network X, may be that a hidden malicious code was embedded in version 2.68 of the Trust Wallet browser extension. Akinator was one of the few who reported the hack several hours before the official confirmation from Trust Wallet.

The assumption is that when a user enters their secret phrase to import a wallet, this code stealthily intercepts the data and sends it to an external server. In this way, the attackers could gain full access to the users' wallets and funds.

The crypto community believes that the malicious code was embedded by someone from the cryptocurrency wallet team. In response to a suggestion by X user under the nickname Crazino.eth that the hack was "certainly carried out by an insider working in the team," Zhao replied "probably."

Broke the cycle. How the price of Bitcoin changed over 10 years at Christmas

AI outperformed humans in a crypto trading tournament. What were the results

Miner "capitulation" called a bullish factor for Bitcoin. Why

Пов'язані питання

QWhat was the total amount of cryptocurrency lost by Trust Wallet due to the hack?

AUsers lost $7 million in cryptocurrency due to the hack.

QWhich specific version of the Trust Wallet application was compromised in the security breach?

AThe security breach affected the browser application version 2.68.

QWhat was the impact on Trust Wallet's native token (TWT) price following the incident?

AThe native token TWT initially dropped by approximately 7% but recovered to its previous levels after the official announcement, trading slightly below $0.83.

QAccording to the article, how did the alleged malware in version 2.68 potentially steal user funds?

AThe hidden malicious code allegedly intercepted a user's secret recovery phrase during wallet import and sent it to an external server, giving attackers full access to the wallets and funds.

QWho did the crypto community and Binance's Changpeng Zhao suggest might be responsible for the hack?

AThe crypto community and Changpeng Zhao suggested that the hack was likely carried out by an insider within the Trust Wallet team.

Пов'язані матеріали

Thanks to Dice Rolls, Bitcoin Keys Are Stored Offline, But Not Everyone Will Do It

The article discusses using dice rolls to generate secure Bitcoin wallet seeds, providing entropy independent of potentially flawed hardware random number generators. It explains that each fair dice roll offers about 2.585 bits of entropy, with around 50 rolls needed for a standard 12-word seed phrase and 99+ recommended for higher security. This method gained attention after a vulnerability was revealed in some Coldcard hardware wallets, where a faulty firmware RNG (dating back to 2021) compromised generated keys. The analysis notes that while a dice-generated main seed was safe from this specific flaw, other Coldcard functions (like creating paper wallets, backup keys, or passwords) could still be vulnerable if they used the defective RNG. The piece argues that while dice-based entropy is technically robust, the manual process is error-prone, tedious, and unrealistic for most new users, who might make mistakes in recording or inputting rolls. It concludes that while manual entropy generation should remain an option for advanced users, the long-term goal is to develop reliable, user-friendly hardware and software that securely generates randomness without requiring specialized knowledge. Coldcard users are advised to check their firmware version and replace any secondary secrets (like paper wallet keys) created with vulnerable devices, while also considering multi-signature setups with devices from different manufacturers for added security.

cryptonews.ru1 год тому

Thanks to Dice Rolls, Bitcoin Keys Are Stored Offline, But Not Everyone Will Do It

cryptonews.ru1 год тому

Michael Saylor Says It Has Become Impossible to Adopt the Bitcoin Update He Opposed!

Michael Saylor stated that it has become mathematically impossible for BIP-110 to achieve the 55% voluntary support threshold within the current Bitcoin mining difficulty adjustment cycle. Based on his analysis of 946 blocks generated up to block 960,561, only 24 blocks contained version field signals supporting BIP-110. Saylor claims all these signals came from DATUM miners sharing rewards via the OCEAN mining pool, with no supporting signals from non-OCEAN miners. He argues this situation prevents BIP-110 from reaching the required consensus level and that the current signals do not represent broad miner agreement. BIP-110 is a proposal aimed at making it more difficult to embed large data like images or text into the Bitcoin network, beyond simple monetary transactions. Its proponents argue Bitcoin should be used primarily for sending money to avoid network congestion. Saylor opposes this, believing the Bitcoin network should not dictate which transactions are necessary and that rules shouldn't change based on the preferences of a few. He also suggests that high support metrics may be inflated by automated signaling software rather than reflecting genuine miner consensus.

cryptonews.ru1 год тому

Michael Saylor Says It Has Become Impossible to Adopt the Bitcoin Update He Opposed!

cryptonews.ru1 год тому

Number of Negative Bitcoin Comments Hits Record High: What Does This Mean?

Cryptocurrency analytics firm Santiment reported that negative sentiment toward Bitcoin on social media has reached a historically high level. The ratio of positive to negative comments about Bitcoin on platforms like X, Reddit, and Telegram has fallen to its lowest point since the firm began using its modern social monitoring system. A key driver of this sentiment is a vulnerability discovered in the firmware of Coldcard hardware wallets, shaking investor confidence in personal storage and cold wallets—previously considered the safest method for securing crypto assets. Santiment noted that while past crises like the collapses of FTX and Mt. Gox were larger in scale, the Coldcard incident uniquely shifted discussions toward hardware security and cold storage vulnerabilities, rather than centralized exchanges or leveraged trading platforms. Data shows only 0.58 positive comments for every negative one, indicating fear has significantly outweighed greed. Although the data covers just one day, Santiment stated the current panic level exceeds peaks seen earlier this year regarding war concerns and surpasses social media panic recorded during previous major crypto crises.

cryptonews.ru2 год тому

Number of Negative Bitcoin Comments Hits Record High: What Does This Mean?

cryptonews.ru2 год тому

SUI Stands on the Brink of a New Breakthrough as Bulls Target a Surge to $20

SUI token unlocked approximately 13.72 million tokens on August 1st, valued at around $9.9 million, representing 0.34% of its circulating supply. The release was part of a larger weekly token unlock wave. Sui utilizes a continuous daily vesting model to distribute selling pressure, unlike one-time "cliff" unlocks. Analyst CryptoPatel identifies the recent price range as a high-timeframe accumulation structure, suggesting a buy zone between $0.50 and $0.70 with long-term targets of $5, $10, and $20. However, the token has recently fallen over 5%, underperforming the broader crypto market, and social sentiment has turned slightly bearish near the $0.71-$0.73 support zone. Fundamentally, network activity remains strong. Mubadala Capital launched a $75 million tokenized private markets fund on Sui, and the network has seen the launch of a Bitcoin-collateral testnet and free stablecoin transfers. The price decline appears driven by the token unlock and general market conditions, not by network issues, highlighting a common industry gap between network growth and short-term token price performance.

cryptonews.ru3 год тому

SUI Stands on the Brink of a New Breakthrough as Bulls Target a Surge to $20

cryptonews.ru3 год тому

BlackRock and Fidelity Lead $265 Million Outflow from Bitcoin ETFs as Ether Price Rises

U.S. spot Bitcoin ETFs saw a net outflow of $265.4 million on July 31st, led by BlackRock's iShares Bitcoin Trust (IBIT) with $122.7 million redeemed, followed by Fidelity's FBTC with $54.8 million. This contrasted sharply with the previous day, July 30th, which recorded a net inflow of $233.1 million, largely driven by IBIT. Meanwhile, spot Ethereum ETFs moved in the opposite direction, attracting a net inflow of approximately $9.03 million, with BlackRock's iShares Ethereum Trust (ETHA) leading. This divergence is part of a broader rotation of institutional interest toward altcoin-linked products, with observers linking the renewed interest in Ether to its role in tokenization and stablecoin settlements. The July 31st outflow continues a longer-term trend, marking the third consecutive quarter of net outflows for U.S. spot Bitcoin ETFs. Overall assets under management remain around $105 billion, but uncertainty surrounding crypto regulation and Bitcoin's price volatility have heightened investor caution. As the largest fund, IBIT's daily flows are expected to set the tone for the broader Bitcoin ETF market.

cryptonews.ru3 год тому

BlackRock and Fidelity Lead $265 Million Outflow from Bitcoin ETFs as Ether Price Rises

cryptonews.ru3 год тому

Торгівля

Спот
活动图片