Trust Wallet Users Lost $7 Million in Cryptocurrency Due to Hack

RBK-crypto发布于2025-12-26更新于2025-12-26

文章摘要

On December 26, the team behind Trust Wallet, a popular cryptocurrency wallet owned by Binance, reported a security breach affecting the browser extension version 2.68. According to Binance founder Changpeng Zhao, the incident was the result of a hack, resulting in losses of approximately $7 million. Users of the compromised version were advised to disable or uninstall it and upgrade to the secure version 2.69. The breach did not impact the mobile application. Trust Wallet's native token (TWT) initially dropped around 7% in price but recovered after the official announcement. Zhao stated that Trust Wallet would cover all user losses and urged affected individuals to contact support. Although no official cause was confirmed, reports suggest that version 2.68 contained hidden malicious code that intercepted users' secret recovery phrases during wallet imports, sending them to an external server. This allowed attackers to gain full access to affected wallets. Some community members, including Zhao, suspect the breach may have been an inside job involving a team member.

On the night of December 26, the team of the popular cryptocurrency wallet Trust Wallet reported a security breach that affected the browser application version 2.68. As explained by Binance founder and head of YZi Labs, which owns Trust Wallet, Changpeng Zhao, the incident occurred as a result of a hacker attack, and the damage amounted to $7 million.

Users of version 2.68 should disable or delete this build and only then install the new version 2.69, and under no circumstances should they open or use the unsafe version. The hack only concerns the browser version 2.68 and did not affect the mobile application.

The native token of Trust Wallet (TWT) reacted with a price drop of about 7%, falling for three hours before the team's announcement around 01:20 Moscow time on December 26. After the official announcement, the TWT price recovered to previous levels and the asset is trading slightly below $0.83.

Zhao stated that Trust Wallet will cover all user losses, and affected users were asked to write to the wallet's support service, a link to which can be found on the official website.

No official statements have been made regarding the causes of the hack. But its essence, according to a report by user Akinator on social network X, may be that a hidden malicious code was embedded in version 2.68 of the Trust Wallet browser extension. Akinator was one of the few who reported the hack several hours before the official confirmation from Trust Wallet.

The assumption is that when a user enters their secret phrase to import a wallet, this code stealthily intercepts the data and sends it to an external server. In this way, the attackers could gain full access to the users' wallets and funds.

The crypto community believes that the malicious code was embedded by someone from the cryptocurrency wallet team. In response to a suggestion by X user under the nickname Crazino.eth that the hack was "certainly carried out by an insider working in the team," Zhao replied "probably."

Broke the cycle. How the price of Bitcoin changed over 10 years at Christmas

AI outperformed humans in a crypto trading tournament. What were the results

Miner "capitulation" called a bullish factor for Bitcoin. Why

相关问答

QWhat was the total amount of cryptocurrency lost by Trust Wallet due to the hack?

AUsers lost $7 million in cryptocurrency due to the hack.

QWhich specific version of the Trust Wallet application was compromised in the security breach?

AThe security breach affected the browser application version 2.68.

QWhat was the impact on Trust Wallet's native token (TWT) price following the incident?

AThe native token TWT initially dropped by approximately 7% but recovered to its previous levels after the official announcement, trading slightly below $0.83.

QAccording to the article, how did the alleged malware in version 2.68 potentially steal user funds?

AThe hidden malicious code allegedly intercepted a user's secret recovery phrase during wallet import and sent it to an external server, giving attackers full access to the wallets and funds.

QWho did the crypto community and Binance's Changpeng Zhao suggest might be responsible for the hack?

AThe crypto community and Changpeng Zhao suggested that the hack was likely carried out by an insider within the Trust Wallet team.

你可能也喜欢

坚守一级市场的VC,手里还有多少钱?

原标题:坚守一级市场的VC,手里还有多少钱? 多位加密货币行业投资人就一级市场现状展开讨论,核心分歧在于资金究竟集中在早期还是后期阶段,但共识是:市场并不缺钱,缺的是值得投资的高质量项目。 Crucible Capital合伙人Meltem Demirors指出,加密货币行业真正能带来“VC级回报”的赛道有限,目前优秀创始人和项目供给不足,导致从种子轮到A轮的门槛显著提高。 Blockworks联合创始人Mippo补充称,早期资金其实过剩,但后期增长资金明显不足。 然而,Varys Capital的Tom Dunleavy与Pantera Capital的Mason Nystrom就资金分布产生激烈争论。Dunleavy引用数据称,2026年80%以上资金流向了后期轮次,A轮及之后的可用资金约60-70亿美元,集中在5-6家大型机构;早期资金仅10-20亿美元,分散于数十家小基金。Nystrom则反驳称,真正能投B轮的基金极少,大多数项目进入传统VC体系后已不算纯加密货币项目,且早期融资的“可获得性”远高于后期。 双方虽未达成一致,但揭示出同一现实:表面资金充足,实则结构收紧——早期资金分散但竞争激烈,中后期资金集中却门槛极高。市场正从依赖叙事和流量转向更看重实际业务进展和长期增长能力。对VC意味着必须更谨慎出手,对创业者则需具备跨越长周期和高门槛的实力。

Odaily星球日报24分钟前

坚守一级市场的VC,手里还有多少钱?

Odaily星球日报24分钟前

交易

现货
合约
活动图片