Trust Wallet Users Lost $7 Million in Cryptocurrency Due to Hack

RBK-crypto发布于2025-12-26更新于2025-12-26

文章摘要

On December 26, the team behind Trust Wallet, a popular cryptocurrency wallet owned by Binance, reported a security breach affecting the browser extension version 2.68. According to Binance founder Changpeng Zhao, the incident was the result of a hack, resulting in losses of approximately $7 million. Users of the compromised version were advised to disable or uninstall it and upgrade to the secure version 2.69. The breach did not impact the mobile application. Trust Wallet's native token (TWT) initially dropped around 7% in price but recovered after the official announcement. Zhao stated that Trust Wallet would cover all user losses and urged affected individuals to contact support. Although no official cause was confirmed, reports suggest that version 2.68 contained hidden malicious code that intercepted users' secret recovery phrases during wallet imports, sending them to an external server. This allowed attackers to gain full access to affected wallets. Some community members, including Zhao, suspect the breach may have been an inside job involving a team member.

On the night of December 26, the team of the popular cryptocurrency wallet Trust Wallet reported a security breach that affected the browser application version 2.68. As explained by Binance founder and head of YZi Labs, which owns Trust Wallet, Changpeng Zhao, the incident occurred as a result of a hacker attack, and the damage amounted to $7 million.

Users of version 2.68 should disable or delete this build and only then install the new version 2.69, and under no circumstances should they open or use the unsafe version. The hack only concerns the browser version 2.68 and did not affect the mobile application.

The native token of Trust Wallet (TWT) reacted with a price drop of about 7%, falling for three hours before the team's announcement around 01:20 Moscow time on December 26. After the official announcement, the TWT price recovered to previous levels and the asset is trading slightly below $0.83.

Zhao stated that Trust Wallet will cover all user losses, and affected users were asked to write to the wallet's support service, a link to which can be found on the official website.

No official statements have been made regarding the causes of the hack. But its essence, according to a report by user Akinator on social network X, may be that a hidden malicious code was embedded in version 2.68 of the Trust Wallet browser extension. Akinator was one of the few who reported the hack several hours before the official confirmation from Trust Wallet.

The assumption is that when a user enters their secret phrase to import a wallet, this code stealthily intercepts the data and sends it to an external server. In this way, the attackers could gain full access to the users' wallets and funds.

The crypto community believes that the malicious code was embedded by someone from the cryptocurrency wallet team. In response to a suggestion by X user under the nickname Crazino.eth that the hack was "certainly carried out by an insider working in the team," Zhao replied "probably."

Broke the cycle. How the price of Bitcoin changed over 10 years at Christmas

AI outperformed humans in a crypto trading tournament. What were the results

Miner "capitulation" called a bullish factor for Bitcoin. Why

相关问答

QWhat was the total amount of cryptocurrency lost by Trust Wallet due to the hack?

AUsers lost $7 million in cryptocurrency due to the hack.

QWhich specific version of the Trust Wallet application was compromised in the security breach?

AThe security breach affected the browser application version 2.68.

QWhat was the impact on Trust Wallet's native token (TWT) price following the incident?

AThe native token TWT initially dropped by approximately 7% but recovered to its previous levels after the official announcement, trading slightly below $0.83.

QAccording to the article, how did the alleged malware in version 2.68 potentially steal user funds?

AThe hidden malicious code allegedly intercepted a user's secret recovery phrase during wallet import and sent it to an external server, giving attackers full access to the wallets and funds.

QWho did the crypto community and Binance's Changpeng Zhao suggest might be responsible for the hack?

AThe crypto community and Changpeng Zhao suggested that the hack was likely carried out by an insider within the Trust Wallet team.

你可能也喜欢

美国对伊朗支持比特币支付的加密服务Hormuz Safe实施制裁

美国财政部通过外国资产控制办公室(OFAC)对两家伊朗公司——波斯湾海上保险公司(PGMIC)和霍尔木兹安全海上服务局——实施制裁,指控其建立了一套通过加密货币支付数字海上保险来规避制裁的计划。同时,八艘船舶和八家被华盛顿指为伊朗“影子船队”组成部分的公司也受到限制。 OFAC称,伊朗政府建立了一个系统,强制要求商业船舶购买强制海上保险才能通过霍尔木兹海峡。伊朗于2026年5月正式启动霍尔木兹安全平台,允许使用比特币等加密货币支付保险单,预计该平台每年可带来高达100亿美元收入。美国当局认为,这种模式使伊朗政权能够获得额外收入并规避西方制裁。 美国财长斯科特·贝森特指责伊朗利用国际航运资助恐怖主义、侵略和伊斯兰革命卫队的镇压行动。OFAC强调,这些保险本应保护船舶免遭扣押等风险,但美方认为大部分风险是伊朗自身制造的。 此外,OFAC还对八家航运公司和油轮实施了制裁,指控其在违反国际限制的情况下运输伊朗石油及石油产品。自2026年初以来,OFAC已对超过100艘与伊朗“影子船队”相关的船舶实施了制裁。受制裁公司的资产将被冻结,且美国公司被禁止与其进行交易。此次制裁是在美伊外交接触的背景下实施的,有报道称伊朗尚未回应美国通过卡塔尔提出的重返谈判建议。

cryptonews.ru40分钟前

美国对伊朗支持比特币支付的加密服务Hormuz Safe实施制裁

cryptonews.ru40分钟前

“新一轮周期前的最后阶段”。比特币在八月将何去何从

《RBK-加密》指出,比特币在7月底从多年低点反弹超10%,但受访专家预计8月不会持续上涨,反而可能跌破6万美元。专家认为,历史趋势和宏观经济因素正在压制加密货币市场,8月将是“区间测试”月份,而非趋势逆转之时。 截至7月底,比特币交易价格约为6.35万美元,较2025年10月的历史高点12.62万美元下跌约50%。自6月初以来,其价格主要在6万至6.5万美元的狭窄区间内波动。 专家指出,比特币面临不利的宏观经济环境,包括美国高利率、持续通胀和高油价,这些因素共同构成压力。高利率使得国债等固定收益资产比加密货币更具吸引力,同时投资者也流向半导体和人工智能相关股票,加剧了资本竞争。比特币现货ETF在2024年上半年出现净流出54亿美元,仅6月就流出创纪录的45亿美元,7月的资金流入微乎其微。 历史数据也显示,8月对加密货币市场通常是弱势月份,2013-2025年间8月的平均收益率为1.12%,但中位数为负7.49%,表明下跌月份居多。美国关键的加密监管法案《CLARITY Act》迟迟未获通过,也增加了不确定性。 尽管如此,专家认为当前可能正处于新周期开始前的最后阶段。每次熊市约持续400天,当前环境适合长期积累比特币。多数专家预计8月比特币将在5.8万至6.8万美元区间震荡,关键支撑位在6-6.1万美元,若跌破5.8万可能下探5-5.5万美元。上涨至6.7万并突破6.8万阻力位的概率较低。部分观点认为,市场可能需等到今年第四季度才会出现更明确的趋势性运动。 专家建议投资者可考虑在比特币和强势项目上逐步建立头寸,但应避免 meme 币和新兴代币。长期来看,市场已处于不错的入场位置。

cryptonews.ru40分钟前

“新一轮周期前的最后阶段”。比特币在八月将何去何从

cryptonews.ru40分钟前

交易

现货
活动图片