On December 25, 2025, Trust Wallet experienced a significant security incident targeting its Chrome browser extension. Users reported unauthorized withdrawals totaling around $7 million across various cryptocurrencies, including Bitcoin (BTC), Ethereum (ETH), Solana (SOL), and others. The vulnerability was limited to version 2.68 of the extension, which had been released only a day earlier on December 24.
Details of the Attack
The breach appears to have involved a potential supply chain compromise, where malicious code was introduced to steal sensitive information, such as seed phrases, during wallet interactions. Blockchain investigator ZachXBT, first highlighted the issue on Telegram, observing rapid and unauthorized fund transfers.
On-chain analysis by Lookonchain showed that the attacker had already moved approximately $4.25 million of the stolen funds to platforms like ChangeNOW, FixedFloat, KuCoin, and HTX for laundering, leaving roughly $2.8 million in hacker-controlled wallets.
Official Response and Reimbursement Promise
Trust Wallet promptly acknowledged the incident on X, confirming that only the browser extension version 2.68 was affected and that the mobile app remained secure. The team released a fixed version 2.69 and urged users to update immediately.
Binance founder CZ (Changpeng Zhao), whose company owns Trust Wallet, publicly stated: “So far, $7m affected by this hack. TrustWallet will cover. User funds are SAFU.” This commitment ensures that affected users will be fully reimbursed through Binance’s Secure Asset Fund for Users.
Step-by-Step Guide to Secure Your Wallet
To protect your assets, follow these steps as soon as possible. First, avoid opening the Trust Wallet Browser Extension on your desktop to prevent any further risks. Then, access the Chrome Extensions panel by entering this address in your browser: chrome://extensions/id=egjidjbpglichdcondbcbdnbeeppgdph. Switch the toggle to “Off” for Trust Wallet if it is still enabled. Next, turn on “Developer mode” in the upper right corner. Click the “Update” button in the upper left to refresh your extensions. Finally, confirm that the version now displays 2.69, which is the secure update.
Additional Safety Recommendations
Beyond the update, consider moving any remaining funds to a new wallet if you believe your extension was compromised. Revoke any unnecessary token approvals using services like Revoke.cash, and for larger holdings, opt for hardware wallets to add an extra layer of protection. This incident highlights the persistent risks associated with browser-based hot wallets, particularly from supply chain attacks.
Ongoing Investigation and Broader Implications
Trust Wallet is continuing its investigation into how the malicious code was introduced. While the swift response and reimbursement pledge have helped mitigate user concerns, the event serves as a reminder to always verify updates from official sources and maintain strong security practices in the cryptocurrency space.
Disclaimer: The views and analysis presented in this article are for informational purposes only and reflect the author’s perspective, not financial advice.
The opinions and market insights shared on CoinsProbe represent the views of individual authors based on prevailing market conditions at the time of publication. Cryptocurrency investments carry significant risk and volatility. Readers are encouraged to conduct their own research and seek professional financial advice before making investment decisions. CoinsProbe and its contributors do not accept responsibility for financial losses or decisions made based on published content.
CoinsProbe may publish sponsored articles, affiliate links, or promotional collaborations. All sponsored material is clearly labeled to maintain transparency with our audience. Our editorial decisions remain fully independent, and advertising partnerships do not influence reviews, rankings, or published opinions.
Since 2023, CoinsProbe has delivered reliable insights on cryptocurrency, blockchain, and digital assets. Our content is created by experienced researchers and analysts who follow strict editorial standards focused on accuracy, transparency, and credibility. Every article is carefully reviewed and verified using trusted sources and current market data. We provide unbiased analysis and timely updates covering everything from emerging crypto projects to major industry developments.
