Trust Wallet Users Lost $7 Million in Cryptocurrency Due to Hack

RBK-crypto發佈於 2025-12-26更新於 2025-12-26

文章摘要

On December 26, the team behind Trust Wallet, a popular cryptocurrency wallet owned by Binance, reported a security breach affecting the browser extension version 2.68. According to Binance founder Changpeng Zhao, the incident was the result of a hack, resulting in losses of approximately $7 million. Users of the compromised version were advised to disable or uninstall it and upgrade to the secure version 2.69. The breach did not impact the mobile application. Trust Wallet's native token (TWT) initially dropped around 7% in price but recovered after the official announcement. Zhao stated that Trust Wallet would cover all user losses and urged affected individuals to contact support. Although no official cause was confirmed, reports suggest that version 2.68 contained hidden malicious code that intercepted users' secret recovery phrases during wallet imports, sending them to an external server. This allowed attackers to gain full access to affected wallets. Some community members, including Zhao, suspect the breach may have been an inside job involving a team member.

On the night of December 26, the team of the popular cryptocurrency wallet Trust Wallet reported a security breach that affected the browser application version 2.68. As explained by Binance founder and head of YZi Labs, which owns Trust Wallet, Changpeng Zhao, the incident occurred as a result of a hacker attack, and the damage amounted to $7 million.

Users of version 2.68 should disable or delete this build and only then install the new version 2.69, and under no circumstances should they open or use the unsafe version. The hack only concerns the browser version 2.68 and did not affect the mobile application.

The native token of Trust Wallet (TWT) reacted with a price drop of about 7%, falling for three hours before the team's announcement around 01:20 Moscow time on December 26. After the official announcement, the TWT price recovered to previous levels and the asset is trading slightly below $0.83.

Zhao stated that Trust Wallet will cover all user losses, and affected users were asked to write to the wallet's support service, a link to which can be found on the official website.

No official statements have been made regarding the causes of the hack. But its essence, according to a report by user Akinator on social network X, may be that a hidden malicious code was embedded in version 2.68 of the Trust Wallet browser extension. Akinator was one of the few who reported the hack several hours before the official confirmation from Trust Wallet.

The assumption is that when a user enters their secret phrase to import a wallet, this code stealthily intercepts the data and sends it to an external server. In this way, the attackers could gain full access to the users' wallets and funds.

The crypto community believes that the malicious code was embedded by someone from the cryptocurrency wallet team. In response to a suggestion by X user under the nickname Crazino.eth that the hack was "certainly carried out by an insider working in the team," Zhao replied "probably."

Broke the cycle. How the price of Bitcoin changed over 10 years at Christmas

AI outperformed humans in a crypto trading tournament. What were the results

Miner "capitulation" called a bullish factor for Bitcoin. Why

相關問答

QWhat was the total amount of cryptocurrency lost by Trust Wallet due to the hack?

AUsers lost $7 million in cryptocurrency due to the hack.

QWhich specific version of the Trust Wallet application was compromised in the security breach?

AThe security breach affected the browser application version 2.68.

QWhat was the impact on Trust Wallet's native token (TWT) price following the incident?

AThe native token TWT initially dropped by approximately 7% but recovered to its previous levels after the official announcement, trading slightly below $0.83.

QAccording to the article, how did the alleged malware in version 2.68 potentially steal user funds?

AThe hidden malicious code allegedly intercepted a user's secret recovery phrase during wallet import and sent it to an external server, giving attackers full access to the wallets and funds.

QWho did the crypto community and Binance's Changpeng Zhao suggest might be responsible for the hack?

AThe crypto community and Changpeng Zhao suggested that the hack was likely carried out by an insider within the Trust Wallet team.

你可能也喜歡

备受期待的加密货币法案《清晰法案》处于关键阶段：白宫将在本周末进行审议

美国《清晰法案》（CLARITY Act）的立法进程正处于关键阶段，其未来可能取决于特朗普政府对一项跨党派道德提案的回应。该法案旨在明确美国证交会（SEC）和商品期货交易委员会（CFTC）对加密资产的监管权限，并建立全面的市场框架。 目前，白宫正审议由共和党参议员汤姆·蒂利斯和民主党参议员鲁本·加列戈提出的一项反提案。该提案授权州总检察长在司法部未能执行道德与利益冲突规则时，对联邦官员提起诉讼，以回应民主党人对由特朗普政府领导的司法部独立性的担忧。 若本周末各方能就道德条款达成一致，参议院可能对《清晰法案》进行投票，但法案仍需获得60票才能通过程序性表决。此前，参议院银行委员会已以15比9的票数通过了该法案。 法案内容还包括稳定币收益规则的折衷方案：限制纯粹因持有代币而产生的类利息支付，但允许与交易、支付、忠诚度计划或平台使用相关的奖励。此举旨在平衡银行对存款外流的担忧与加密公司维持奖励计划的需求。 若道德条款谈判失败，《清晰法案》在参议院的推进可能再次受阻，稳定币奖励监管的不确定性也将持续。

cryptonews.ru12 分鐘前

备受期待的加密货币法案《清晰法案》处于关键阶段：白宫将在本周末进行审议

cryptonews.ru12 分鐘前

访谈Robinhood高管：Meme+代币化美股系"杠铃"获客策略，各业务线均实现亿级收入

Robinhood Chain主网上线三周，周DEX交易量突破30亿美元，交易笔数超1.05亿，TVL超3亿美元。其战略核心是“杠铃”策略，一端通过无许可生态接纳Meme代币吸引活跃用户，另一端通过代币化股票等现实世界资产（RWA）服务全球用户，两者并行扩展用户群。 Robinhood计划将其2700万入金账户逐步引入链上，通过简化DeFi产品（如Robinhood Earn）的体验，实现“CeFi与DeFi融合”，让用户无需管理钱包即可获得链上收益。技术上选择基于Arbitrum技术栈构建L2，看重其安全性、EVM兼容性、高速度和低费用。 公司淡化与Base等链的竞争，强调目标是“做大蛋糕”，让全球更多人接触链上资产。合作方选择注重合规、独特体验和差异化。商业模式上，Robinhood正从券商向涵盖股票、期权、加密、信用卡、银行服务的“超级应用”演进，各业务线均已实现亿级收入。链当前阶段优先优化采用率，而非最大化收入。

marsbit1 小時前

访谈Robinhood高管：Meme+代币化美股系"杠铃"获客策略，各业务线均实现亿级收入

marsbit1 小時前

富达Q3报告：BTC、ETH与SOL持续筑底，本轮加密熊市还要走多远？

富达数字资产发布了2026年第三季度加密市场信号报告。报告指出，当前加密市场整体仍处于熊市筑底阶段。 **市场总览：** * **加权NUPL（净未实现盈亏）：** 已降至-0.01，表明市场整体略低于盈亏平衡线。仅比特币（BTC）仍录得未实现盈利，以太坊（ETH）和Solana（SOL）均处于亏损状态，BTC起到了市场稳定器的作用。 * **BTC主导率：** 升至68%，资金仍高度集中于BTC，尚未出现向其他数字资产的轮动迹象。 * **资产表现：** BTC、ETH、SOL过去一年及年初至今价格全线下跌，多项指标接近历史投降区间。现货ETP持续净流出，宏观环境及市场情绪构成拖累。 **比特币（BTC）：** * **NUPL（0.09）：** 处于“希望-恐惧”区间，情绪谨慎。 * **动能信号：** 负面，下跌形成偏空脉冲。 * **Yardstick（算力市盈率）：** 正面，接近历史低位，显示BTC相对于网络能源投入可能被低估。参照历史底部周期（约300天），当前约203天的调整可能已走完三分之二，2026年10月是可观察的时间窗口。 * **相对黄金表现：** 负面，但近期跌势趋缓。 * **算力：** 负面，受价格低迷及AI算力资源竞争影响，算力从高点回落。 **以太坊（ETH）：** * **NUPL（-0.43）：** 处于“投降”区间，但历史显示较低NUPL往往对应较高长期回报。 * **动能信号：** 负面，上涨动能未恢复。 * **使用指标：** 中性，链上活动随价格下跌有所降温。 * **稳定币转账额：** 正面，持续创历史新高，显示真实使用需求增强。 * **网络费用：** 负面，受扩容影响持续下降。 **Solana（SOL）：** * **NUPL（-0.72）：** 处于“投降”区间，历史波动大。 * **动能信号：** 负面，但短期波动率已高于中期，需关注企稳可能。 * **使用指标：** 正面，链上交易活动在熊市中仍保持韧性并增长。 * **稳定币转账额：** 正面，长期上升趋势完好。 * **网络费用：** 中性，下降趋势可能接近底部。 **总结：** 报告认为，市场正处于寻找底部的修复过程中。BTC凭借其流动性优势相对抗跌，而ETH和SOL承受更大压力。虽然多项指标显示市场情绪低迷且接近历史投降区域，为长期投资者可能提供了有吸引力的入场位置，但全面复苏仍需等待更广泛的市场风险偏好恢复和基本面改善。

marsbit1 小時前

富达Q3报告：BTC、ETH与SOL持续筑底，本轮加密熊市还要走多远？

marsbit1 小時前

比特币和以太坊八月表现如何？以下是您需要了解的关键事实

比特币和以太坊在7月上涨后，8月以历史性的疲软表现开局。历史数据显示，两种加密货币在8月均可能以负收益收盘。 以太坊在7月表现优于比特币，涨幅达18.5%，而比特币上涨7%，前者月度收益率高出约11.5个百分点。然而，自2016年以来，以太坊8月的表现较为波动：在10个8月中，4次上涨，6次下跌。最大涨幅出现在2017年8月，达92.86%；最大跌幅在2018年8月，为-34.79%。其8月平均收益率为6.74%，但中位数为-1.74%，表明正的平均值主要由少数大涨月份（如2017年）推高。 比特币8月历史表现同样不明朗，平均收益率为1.06%，但中位数收益为-6.99%。负的中位数意味着亏损收官的8月更为常见。近期数据也显示波动：2025年8月涨8.13%，2024年涨2.95%，2023年则跌4.02%。 总体而言，尽管两者8月历史平均收益为正，但负的中位数收益率表明，强劲反弹拉升了平均值，而通常8月出现负收益的可能性更大。

cryptonews.ru2 小時前

比特币和以太坊八月表现如何？以下是您需要了解的关键事实

cryptonews.ru2 小時前

参议员提议成立打击特朗普加密货币业务的机构

美国参议员舒默提议设立专门机构，以调查前总统特朗普及其家族的加密货币业务，并打击公职人员相关腐败行为。根据提议，该联邦机构将由参议院批准的七人委员会领导，独立运作并拥有调查和传唤权力。舒默还建议允许私人及州检察长对政要和大型公司提起民事诉讼，追回涉嫌腐败所得。他指出，特朗普自2025年再度担任总统以来，通过加密货币项目获利超过14亿美元，其家族同期获利超40亿美元，涉及平台包括World Liberty Financial及相关代币。白宫否认特朗普存在利益冲突，但此事已导致CLARITY法案审议陷入僵局。民主党人坚持在该法案中加入条款，禁止总统、国会议员、公职人员及其家属在任内从加密货币中获利。此前，舒默与民主党同僚曾试图在2025年夏季通过的稳定币法案中加入类似修正案，但未获通过。

cryptonews.ru3 小時前

参议员提议成立打击特朗普加密货币业务的机构

cryptonews.ru3 小時前

交易

現貨
活动图片

熱門分類right-arrow

熱門標籤right-arrow