Trust Wallet Users Lost $7 Million in Cryptocurrency Due to Hack

RBK-cryptoОпубліковано о 2025-12-26Востаннє оновлено о 2025-12-26

Анотація

On December 26, the team behind Trust Wallet, a popular cryptocurrency wallet owned by Binance, reported a security breach affecting the browser extension version 2.68. According to Binance founder Changpeng Zhao, the incident was the result of a hack, resulting in losses of approximately $7 million. Users of the compromised version were advised to disable or uninstall it and upgrade to the secure version 2.69. The breach did not impact the mobile application. Trust Wallet's native token (TWT) initially dropped around 7% in price but recovered after the official announcement. Zhao stated that Trust Wallet would cover all user losses and urged affected individuals to contact support. Although no official cause was confirmed, reports suggest that version 2.68 contained hidden malicious code that intercepted users' secret recovery phrases during wallet imports, sending them to an external server. This allowed attackers to gain full access to affected wallets. Some community members, including Zhao, suspect the breach may have been an inside job involving a team member.

On the night of December 26, the team of the popular cryptocurrency wallet Trust Wallet reported a security breach that affected the browser application version 2.68. As explained by Binance founder and head of YZi Labs, which owns Trust Wallet, Changpeng Zhao, the incident occurred as a result of a hacker attack, and the damage amounted to $7 million.

Users of version 2.68 should disable or delete this build and only then install the new version 2.69, and under no circumstances should they open or use the unsafe version. The hack only concerns the browser version 2.68 and did not affect the mobile application.

The native token of Trust Wallet (TWT) reacted with a price drop of about 7%, falling for three hours before the team's announcement around 01:20 Moscow time on December 26. After the official announcement, the TWT price recovered to previous levels and the asset is trading slightly below $0.83.

Zhao stated that Trust Wallet will cover all user losses, and affected users were asked to write to the wallet's support service, a link to which can be found on the official website.

No official statements have been made regarding the causes of the hack. But its essence, according to a report by user Akinator on social network X, may be that a hidden malicious code was embedded in version 2.68 of the Trust Wallet browser extension. Akinator was one of the few who reported the hack several hours before the official confirmation from Trust Wallet.

The assumption is that when a user enters their secret phrase to import a wallet, this code stealthily intercepts the data and sends it to an external server. In this way, the attackers could gain full access to the users' wallets and funds.

The crypto community believes that the malicious code was embedded by someone from the cryptocurrency wallet team. In response to a suggestion by X user under the nickname Crazino.eth that the hack was "certainly carried out by an insider working in the team," Zhao replied "probably."

Broke the cycle. How the price of Bitcoin changed over 10 years at Christmas

AI outperformed humans in a crypto trading tournament. What were the results

Miner "capitulation" called a bullish factor for Bitcoin. Why

Пов'язані питання

QWhat was the total amount of cryptocurrency lost by Trust Wallet due to the hack?

AUsers lost $7 million in cryptocurrency due to the hack.

QWhich specific version of the Trust Wallet application was compromised in the security breach?

AThe security breach affected the browser application version 2.68.

QWhat was the impact on Trust Wallet's native token (TWT) price following the incident?

AThe native token TWT initially dropped by approximately 7% but recovered to its previous levels after the official announcement, trading slightly below $0.83.

QAccording to the article, how did the alleged malware in version 2.68 potentially steal user funds?

AThe hidden malicious code allegedly intercepted a user's secret recovery phrase during wallet import and sent it to an external server, giving attackers full access to the wallets and funds.

QWho did the crypto community and Binance's Changpeng Zhao suggest might be responsible for the hack?

AThe crypto community and Changpeng Zhao suggested that the hack was likely carried out by an insider within the Trust Wallet team.

Пов'язані матеріали

Coldcard Attack Escalates: Fourth Wave Pushes Bitcoin Theft Past $90 Million

The Coldcard hardware wallet attack has escalated into a major security crisis, with estimated thefts now exceeding $90 million from over 4,500 wallets. The flaw, present in Mk3 devices running firmware v4.0.1 to v5.0.3, resulted in seed phrases with lower entropy, making them predictable. A confirmed fourth wave of attacks recently stole approximately 448.73 BTC from 709 addresses over a 2.5-hour period. Manufacturer Coinkite has destroyed vulnerable inventory, halted shipments, and released patched firmware. However, the update only secures newly generated seeds; wallets created on the vulnerable firmware remain at high risk and require immediate migration of funds. The company has suggested alternative wallets and asked affected users to retain their devices for potential recovery efforts. This incident severely damages trust in a leading cold storage solution.

TheNewsCrypto5 хв тому

Coldcard Attack Escalates: Fourth Wave Pushes Bitcoin Theft Past $90 Million

TheNewsCrypto5 хв тому

China's Tech Industry Is Crossing the 'Visibility Threshold' in Bulk

China's tech industries are successively crossing a "visibility threshold" into the global market spotlight. This wave, exemplified by AI, robotics, and innovative pharmaceuticals (the "new-new three"), differs from past waves like garments/appliances or EVs/batteries/solar panels. Earlier industries met existing demand, but these new sectors are helping to *define* emerging markets and applications. Crossing this threshold signifies an industry has achieved scale, competitive advantages, rapid growth, and the ability to drive its supply chain. Recent data shows China's AI sector growing over 30%, producing 80% of certain intelligent robots, and a surge in new drug approvals. This acceleration stems from China's industrial evolution from "completeness" to "density": different sectors now share technologies, talent, and infrastructure, enabling capabilities (e.g., from EVs) to rapidly migrate to adjacent fields (e.g., robotics). This dense ecosystem, combined with improved system integration and faster market access, acts as an infrastructure for generating new industries. The nature of competition is also evolving. The visible product is just an interface; long-term advantage lies in the underlying patents, standards, and open ecosystems. While building this "moat," China's approach emphasizes openness—through open-source models and collaborative R&D—to foster wider adoption and iterative improvement. Crossing the visibility line marks the start of market validation. The consecutive emergence of these industry waves signals China is developing a sustained capacity to generate new, globally relevant innovations, shifting from being defined by global narratives to participating in shaping them.

marsbit30 хв тому

China's Tech Industry Is Crossing the 'Visibility Threshold' in Bulk

marsbit30 хв тому

Forbes: 7 Million Bitcoins Exposed to Quantum Computing Risk—Must BTC Change Its "Lock"?

**Forbes: Quantum Computing Threatens 7 Million Bitcoin — Must BTC Change Its "Lock"?** A Forbes article explores the emerging threat quantum computing poses to Bitcoin's cryptography, which secures an estimated 7 million BTC (~$470 billion). While a machine capable of breaking Bitcoin's Elliptic Curve Digital Signature Algorithm (ECDSA) doesn't yet exist, researchers are raising alarms. Google studies suggest the required number of qubits for such an attack is decreasing rapidly. The risk applies to "exposed" public keys, found in early "Satoshi-era" addresses or reused addresses, but exposure does not equal theft. The Bitcoin developer community is divided on solutions. Proposals include BIP-360 for new quantum-resistant address types and the more controversial BIP-361, which would eventually freeze non-migrated, vulnerable coins to prevent future quantum theft. Startups like American Fortress are entering the space, claiming solutions like a backward-compatible soft fork to auto-freeze vulnerable wallets. However, its claims are met with caution as its technical paper is unpublished and its design unaudited. The article frames this as a high-stakes race, weighing urgent security upgrades against Bitcoin's foundational principles and long-term viability.

marsbit36 хв тому

Forbes: 7 Million Bitcoins Exposed to Quantum Computing Risk—Must BTC Change Its "Lock"?

marsbit36 хв тому

10 Billion Repurchase Fails to Halt HYPE's Decline, Are Core Members and Multicoin Quietly Selling Tokens?

Foresight News reports that despite a massive $1 billion buyback program by the Assistance Fund, the HYPE token has fallen from its July high of $70 to around $52.40. Analyst MLM tracked data showing that since team token vesting began in December 2025, approximately 4.93 million HYPE (worth ~$270M) were allocated to core contributors. Of these, 1.19 million (~$32.5M) were sold on the open market, and 3.14 million (~$132M) were transferred to OTC desks. However, the report argues that direct team selling is not the primary driver of the price decline. In the same period, the protocol's Assistance Fund used 99% of trading fees to repurchase about 9.8 million HYPE for approximately $364 million, a rate more than double the team's selling pressure. The analysis points to other significant factors: major venture capital firms like Multicoin Capital and a16z have been unstaking and moving substantial amounts of HYPE to exchanges, with some confirming sales for portfolio management. Additionally, HYPE spot ETFs have experienced consistent daily net outflows since early July, reversing the strong inflows seen in May and June. The report concludes that while protocol buybacks absorb team selling, declining trading volume reduces this buyback power, and combined selling pressure from large investors and ETFs has significantly impacted the price.

marsbit54 хв тому

10 Billion Repurchase Fails to Halt HYPE's Decline, Are Core Members and Multicoin Quietly Selling Tokens?

marsbit54 хв тому

WEEX API Fast Connect: Turn Every Sign-In Into a Live Trader in Under 10 Seconds

WEEX has launched API Fast Connect, a one-click OAuth authorization system designed for its Broker partners. It allows users to link their WEEX trading account to partner platforms without manually creating or handling API keys, similar to a "Sign in with Google" for crypto. The solution aims to eliminate the major friction and user drop-off point of traditional API key setup. With Fast Connect, authorization and account binding are completed in under 10 seconds, enabling users to go from sign-in to live trading almost instantly. Key benefits for partners include frictionless user conversion, lower churn, higher retention, and faster trading volume growth. The system works by redirecting users to an official WEEX page for secure permission confirmation, after which an API key is auto-generated and encrypted on the backend. It's built for platforms like AI signal services, trading bots, and copy-trading tools that currently require manual API configuration from their users. Fast Connect is part of the broader WEEX Broker partner program.

TheNewsCrypto1 год тому

WEEX API Fast Connect: Turn Every Sign-In Into a Live Trader in Under 10 Seconds

TheNewsCrypto1 год тому

Торгівля

Спот