{"id":880888,"date":"2025-12-27T00:11:38","date_gmt":"2025-12-27T06:11:38","guid":{"rendered":"https:\/\/newsycanuse.com\/index.php\/2025\/12\/27\/trust-wallet-browser-extension-compromised-drains-over-6m-user-funds\/"},"modified":"2025-12-27T00:11:38","modified_gmt":"2025-12-27T06:11:38","slug":"trust-wallet-browser-extension-compromised-drains-over-6m-user-funds","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2025\/12\/27\/trust-wallet-browser-extension-compromised-drains-over-6m-user-funds\/","title":{"rendered":"Trust Wallet Browser Extension Compromised, Drains Over $6M User Funds"},"content":{"rendered":"
\n

\n Trust Wallet Browser Extension Compromised, Drains Over $6M User Funds <\/h2>\n
\n
\n

\n <\/p>\n

Author<\/p>\n

\n

Sujha Sundararajan<\/p>\n

\n
\n

\n <\/p>\n

\n
\n

Author<\/p>\n

Sujha Sundararajan<\/span>\"Verified\"<\/span>\n <\/p>\n<\/p><\/div>\n

\n

Part of the Team Since<\/p>\n

Jun 2023<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n

\n

About Author<\/p>\n

Sujha has been recognised as \ud83d\udfe3 Women In Crypto 2024 \ud83d\udfe3 by BeInCrypto for her leadership in crypto journalism.<\/p>\n<\/p><\/div>\n<\/div><\/div>\n<\/p><\/div>\n

\n

Last updated:\u00a0<\/p>\n

\"Trust<\/p>\n

Multi-chain crypto wallet provider Trust Wallet has confirmed a security breach on Thursday, with estimated initial losses exceeding $6 million.<\/p>\n

Blockchain security expert ZachXBT flagged the incident<\/a> after multiple Trust Wallet users experienced unauthorized fund outflows. All victims have one thing in common \u2013 they installed the new Trust Wallet extension before the theft.<\/p>\n

\u201cWe\u2019ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only,\u201d the crypto wallet wrote on X.<\/p>\n

\u201cUsers with Browser Extension 2.68 should disable and upgrade to 2.69.\u201d<\/p>\n

\n
\n
\n
\n

We\u2019ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69.<\/p>\n

Please refer to the official Chrome Webstore link here: https:\/\/t.co\/V3vMq31TKb<\/a><\/p>\n

Please note: Mobile-only users\u2026<\/p>\n<\/div>\n

\u2014 Trust Wallet (@TrustWallet) December 25, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

Following the initial report, ZachXBT noted that the number of victims has risen to the hundreds, with funds over $6 million siphoned in SOL<\/a>, BTC<\/a> and EVM tokens.<\/p>\n

Besides, Arkham data<\/a> shows that exploiters made use of several receiving addresses, moving funds across various wallets.<\/p>\n

Source: Arkham<\/em><\/figcaption><\/figure>\n

Trust Wallet Users Report Losing Funds<\/span><\/h2>\n

Several Trust Wallet users reported that funds were drained from their wallet addresses within a short time frame on Christmas.<\/p>\n

One user took to X, reporting the loss of over $300,000 after coming back from Christmas. \u201cEverything I\u2019ve been building for. Stolen on Christmas Day.\u201d The transactions took place within a 4-minute window, the user added. However, ZachXBT flagged that X account as suspicious. <\/p>\n

Users reported that multiple blockchains, including EVM-compatible networks, Bitcoin, and Solana, were affected.<\/p>\n

\n
\n
\n
\n

That X account is a scammer larping as a girl and lying about being a victim of the hack to bait engagement. <\/p>\n

>44 username changes
>countless meme coin scams
>only 234 posts for a 2023 account
>they preblocked me<\/p>\n

X User ID: 1725149174780268544 pic.twitter.com\/mGyLe5Jvf5<\/a><\/p>\n<\/div>\n

\u2014 ZachXBT (@zachxbt) December 26, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

What Happened<\/span><\/h2>\n

Trust Wallet released a new browser extension update on Wednesday, which users installed through the usual update process.<\/p>\n

At first, the extension appeared legit, however, hackers masqueraded the code address, extracting users\u2019 seed phrases and draining wallets.<\/p>\n

\u201cReports indicate that importing a seed phrase into the extension can result in immediate wallet draining,\u201d wrote one user<\/a>.<\/p>\n

Browser extensions operate with elevated access to web pages, cookies, storage, and browsing activity. When abused, they provide a near-perfect avenue for credential theft \u2013 without triggering traditional endpoint defences.<\/p>\n

Recently, several reports have surfaced<\/a> with high-profile extension-related wallet threats. Per HackerNews, more than 40 fake crypto wallet extensions<\/a> were stealing users\u2019 keys and IPs early this year.<\/p>\n

Trust Wallet noted that mobile-only users and other browser extension versions were not impacted by the breach.<\/p>\n

\u201cWe understand how concerning this is, and our team is actively working on the issue. We\u2019ll keep sharing updates as soon as possible,\u201d the team wrote on X.<\/p>\n

Further, in a latest update<\/a>, the wallet said that the customer support is already in touch with impacted users regarding next steps.<\/p>\n

\n <\/p>\n

\n \n \n \n \n <\/svg>
\n Follow us on Google News <\/a>\n <\/p>\n<\/p><\/div>\n

Read More<\/a>
\n Rebecka Mongold<\/p>\n","protected":false},"excerpt":{"rendered":"

Trust Wallet Browser Extension Compromised, Drains Over $6M User Funds Author Sujha Sundararajan Author Sujha Sundararajan Part of the Team Since Jun 2023 About Author Sujha has been recognised as \ud83d\udfe3 Women In Crypto 2024 \ud83d\udfe3 by BeInCrypto for her leadership in crypto journalism. Last updated:\u00a0 December 25, 2025 Multi-chain crypto wallet provider Trust Wallet<\/p>\n","protected":false},"author":1,"featured_media":880889,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3658,25349],"tags":[],"class_list":["post-880888","post","type-post","status-publish","format-standard","has-post-thumbnail","category-trust","category-wallet"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/880888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=880888"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/880888\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/880889"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=880888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=880888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=880888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}