Trust Wallet Launches Compensation Program After Chrome Extension Breach

2d ago•

bullish:

bearish:

This article was first published on The Bit Journal. Trust Wallet has introduced a compensational program to users because they became victims of a recent security breach of its Chrome browser extension, with a malicious update revealing wallet recovery phrases, causing millions of dollars in crypto losses.

In a statement released on Friday, Trust Wallet has affirmed that those who have been affected now have the opportunity to file claims using an official support form, which is found on the company’s portal. The announcement comes after users have reported unauthorized fund transfers in the near future after installing the faulty extension update.

Update on Trust Wallet Browser Extension v2.68 Security Incident: Compensation Process

To start the compensation process, affected users should please complete this form: https://t.co/xlBLrL6kMj to help us process your case.

Our support team is prioritizing all the victims from… https://t.co/yaqFNLxuyx

— Trust Wallet (@TrustWallet) December 26, 2025

Trust Wallet Outlines Compensation Claim Requirements

Trust Wallet is a service that needs claimants to submit a simple form of identification information to initiate the compensation process by giving their email address and the country they are located in.

Users are also required to provide affected wallet addresses, suspected attacker addresses and transaction hashes associated with the unauthorized withdrawals. According to the company, submissions would go through a rigorous verification process before payment is accepted.

Trust Wallet, in a post on X on December 26, admitted that the incident had caused disruption, but stated that its support department was already beginning to contact affected users. The company has underlined that all the victims of the breach that would have been verified will be compensated, and an update on progress will be provided on a regular basis.

Fake Compensation Forms Raise Security Concerns

Meanwhile, crypto wallet firm advised its users to be wary because scammers will seek to take advantage of the situation. The fake compensation forms, impersonated Trust Wallet support accounts, and unsolicited direct messages have been circulating on Telegram and other social media platforms, according to the company. The users were encouraged to use official communication channels only.

The compensation news came after Trust Wallet on December 25 confirmed that the breach had been limited to version 2.68 of its Chrome browser extension. The problem was first reported by blockchain investigator ZachXBT who was receiving reports of fast and unauthorized outflows of funds soon after installing the update.

Hack Exploited Chrome’s Trusted Update Mechanism

After finding out about it, Trust Wallet recommended that users who had the compromised version should disable it as soon as possible and update to version 2.69. The number of victims increased to the hundreds shortly afterward as reported by ZachXBT and over 6 million dollars had been emptied over Bitcoin, Solana, and EVM-compatible networks.

Follow the step-by-step guide soonest possible:

Step 1: Do NOT open the Trust Wallet Browser Extension on your desktop device to ensure the security of your wallet and prevent further issues.

Step 2: Go to Chrome Extensions panel in your Chrome browser by copying following to…

— Trust Wallet (@TrustWallet) December 26, 2025

As investigators have observed, the rogue crypto wallet firm extension looked like a regular extension and was installed via the regular update process on Chrome. Nonetheless, embedded code gave hackers an opportunity to recover wallet phrases, and this would enable them to access user wallets immediately. A number of users also cautioned that when a seed phrase is simply put into the extension, it immediately causes one to drain their wallets.

🚨 Security Alert

It appears that the @TrustWallet browser extension may have been compromised via a supply-chain attack in the Dec 24 update.

Reports indicate that importing a seed phrase into the extension can result in immediate wallet draining.

⚠️ Do NOT use the Trust… pic.twitter.com/D2ZMnnkyvj

— Akinator | Testnet Arc (@0xakinator) December 25, 2025

Browser Extensions Pose Elevated Security Risks

The security researchers have pointed out that browser extensions such as Trust Wallet are run with higher permissions, and therefore they have access to web pages, storage, and browsing data, thus have a high value target when exploited.

Trust Wallet had clarified that its mobile applications and other versions of browser extensions were not affected. Its Chrome Web Store listing indicates that alone the Chrome extension has around one million users.

Binance Founder Confirms Trust Wallet Reimbursements

In another announcement, Changpeng Zhao, the founder of Binance, which purchased Trust Wallet in 2018, affirmed that all the confirmed losses will be refunded. According to Zhao, the damages were estimated to be around 7 million dollars and user funds were to be fully refunded.

So far, $7m affected by this hack. @TrustWallet will cover. User funds are SAFU. Appreciate your understanding for any inconveniences caused. 🙏

The team is still investigating how hackers were able to submit a new version. https://t.co/xdPGwwDU8b

— CZ 🔶 BNB (@cz_binance) December 26, 2025

The crypto wallet firm event occurs in the context of more extensive exploits of wallets within the crypto sector. Chainalysis estimates that over $3.4 billion had been stolen in January 2025 to early December 2025, with personal wallet compromises taking an increasing portion of that total loss.

Binance Founder Confirms Trust Wallet Reimbursements

Conclusion

Trust Wallet’s response underscores mounting security pressures facing crypto wallets, as browser-based attacks grow more sophisticated. Although the reimbursement commitment of the company might alleviate short-term losses, the event shows that the extension protection requires more vigour, user awareness and a wider industry campaign to restrain increasing wallet scams.

Summary

Trust Wallet opened a compensation process after a malicious Chrome extension update led to millions in crypto losses.
The breach affected version 2.68 only, draining over $6 million across multiple blockchains, per ZachXBT.
The incident reflects rising wallet security threats, with personal wallet hacks making up a growing share of crypto thefts.

Glossary of Key Terms

Trust Wallet: A crypto wallet offering mobile and browser extension services.
Compensation Program: Official process to reimburse victims of the breach.
Chrome Extension 2.68: The compromised version that exposed wallet seed phrases.
Seed Phrase: Private recovery code giving full access to a wallet.
ZachXBT: Blockchain investigator who first reported the unauthorized fund outflows.
Fake Compensation Forms: Scams targeting victims during the payout process.
Browser Extensions: Programs running in browsers with high permissions, vulnerable to attacks.
Version 2.69: Safe update users were instructed to install.
Changpeng Zhao: Binance founder confirming reimbursement of verified losses.
Crypto Wallet Exploits: Growing trend of personal wallet hacks in the crypto industry.