0
0
A major security incident involving Trust Wallet was confirmed on December 26, 2025, after a supply-chain attack compromised its Chrome browser extension.
The attack targeted version 2.68 of the extension, where malicious code was injected into an official update, allowing attackers to steal user seed phrases and drain wallets.
Importantly, mobile-only Trust Wallet users were not affected.
The exploit reportedly occurred on Christmas Day (Dec 25), before being publicly disclosed.
Changpeng Zhao, founder of Binance, which owns Trust Wallet, publicly confirmed that:
All affected users will be fully reimbursed.
He also reassured users that funds and core systems remain safe, emphasizing that the issue was isolated to the compromised browser extension version.
Trust Wallet has already released version 2.69, which removes the malicious code. Users are strongly advised to:
This incident is another reminder that browser extensions remain a high-risk attack vector, even when updates come from official sources.
Security experts continue to stress:
0
0
Manage all your crypto, NFT and DeFi from one placeSecurely connect the portfolio youâre using to start.
0
0
