US EditionChangpeng Zhao-Owned Trust Wallet To Cover $7 Million User Losses After Security Breach
Suspected supply-chain compromise in the Dec 24 Trust Wallet Chrome extension update caused immediate unauthorized wallet drains, with losses estimated above $6 million, investigators say.
- Trust Wallet confirmed that version 2.68 of its Chrome browser extension caused wallets to be drained shortly after the December 24 update, affecting self-custody wallet users.
- Analysts found a bundled JavaScript file named 4482.js that included undocumented code appearing to exfiltrate data to metrics-trustwalletcom, a domain registered days earlier and now inaccessible.
- ZachXBT first alerted the community and shared suspected theft addresses, updating that hundreds of victims may have been affected with losses exceeding $6 million across EVM-compatible networks, Bitcoin, and Solana.
- Trust Wallet urged users to disable version 2.68 and upgrade to version 2.69 via the official Chrome Web Store, while researchers and community channels such as Telegram and X advised withdrawing funds, revoking approvals, and removing the extension.
- For self-custody users, the episode emphasizes operational security responsibilities, highlighting risks of browser-based wallets, supply-chain vulnerability concept, and dangers of seed phrase imports.
19 Articles
19 Articles
Trust Wallet Chrome extension hack tied to millions in losses
Several users of the Trust Wallet Chrome extension report having their cryptocurrency wallets drained after installing a compromised extension update released on December 24, prompting an urgent response from the company and warnings to affected users. Simultaneously, BleepingComputer observed a phishing domain launched by hackers.
Changpeng Zhao-Owned Trust Wallet To Cover $7 Million User Losses After Security Breach
Trust Wallet, a cryptocurrency wallet owned by Binance founder Changpeng "CZ" Zhao, said on Thursday it had identified a security breach affecting a specific version of its browser extension, with Zhao confirming that at least $7 million was stolen and that the company will reimburse all affected users. Trust Wallet Urges Upgrade After Breach Blockchain investigators first flagged unusual activity on the Trust Wallet browser extension over the C…
Trust Wallet Users Lose $7 Million In Malicious Chrome Extension Attack
Trust Wallet users have fallen victim to a sophisticated cybercrime operation that drained approximately $7 million from cryptocurrency wallets through a malicious Chrome browser extension, according to security researchers tracking the incident. The attack represents the latest in a series of devastating cryptocurrency thefts that have plagued the digital asset ecosystem throughout 2025. The malicious extension masqueraded as a legitimate Trust…
Coverage Details
Bias Distribution
- 75% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
