Trust Wallet Hacked: What Crypto Users Should Do Now
Trust Wallet says a “safety incident” hit just one slice of its product stack: the Chrome browser extension on model 2.68. If you’re a mobile-only consumer, the corporate says you’re not affected. If you’re on every other extension model, the corporate says you’re not affected both. The downside, per Trust Wallet’s personal wording, is tightly scoped, even when the fallout doesn’t really feel that manner if you’re looking at an emptied deal with.
The first public flare went up on Dec. 25 by way of on-chain investigator ZachXBT, who posted a Telegram warning that “a lot of Trust Wallet customers have reported that funds had been drained from pockets addresses throughout the previous couple of hours.”
He harassed that “the precise root trigger has not been decided,” then identified an uncomfortable coincidence: “the Trust Wallet Chrome extension pushed a brand new replace yesterday.” In the identical message, he requested victims to DM him on X so he might “replace the checklist of theft addresses under as I confirm extra,” and he started publishing alleged theft locations throughout a number of chains. His checklist included a number of EVM addresses and a Solana deal with.
NEW: @zachxbt SAYS “A NUMBER OF TRUST WALLET USERS HAVE REPORTED THAT FUNDS WERE DRAINED FROM WALLET ADDRESSES WITHIN THE PAST COUPLE OF HOURS”
SOURCE: https://t.co/4shDweZnJF pic.twitter.com/MkbQWZKGCc
— DEGEN NEWS (@DegenerateNews) December 25, 2025
Trust Wallet Confirms The Hack
The pockets agency later confirmed the incident on X. “We’ve recognized a safety incident affecting Trust Wallet Browser Extension model 2.68 solely. Users with Browser Extension 2.68 ought to disable and improve to 2.69,” the corporate wrote, linking customers to the official Chrome Web Store itemizing.
It added: “Please observe: Mobile-only customers and all different browser extension variations usually are not impacted.” The publish closed with the form of line each safety workforce finally ends up typing eventually: “We perceive how regarding that is and our workforce is actively engaged on the difficulty. We’ll preserve sharing updates as quickly as attainable.”
Then the steerage obtained extra pressing, and extra particular. Trust Wallet warned customers who hadn’t up to date to 2.69: “please don’t open the Browser Extension till you have got up to date. This could assist to make sure the safety of your pockets and forestall additional points.”
We’ve recognized a safety incident affecting Trust Wallet Browser Extension model 2.68 solely. Users with Browser Extension 2.68 ought to disable and improve to 2.69.
Please confer with the official Chrome Webstore hyperlink right here: https://t.co/V3vMq31TKb
Please observe: Mobile-only customers…
— Trust Wallet (@TrustWallet) December 25, 2025
In a follow-up, it spelled out a step-by-step that boils all the way down to: don’t open the extension, go to Chrome’s extensions web page for Trust Wallet, toggle it off if it’s nonetheless on, allow Developer mode, hit “Update,” and make sure you’re on model 2.69 earlier than doing anything. It’s not glamorous, however it’s actionable, which is what issues if you’re in incident mode.
As the claims and counterclaims swirled, cybersecurity agency PeckShield put an early greenback determine on the harm. “The Trust Wallet exploit has drained >$6M value of cryptos from victims,” PeckShield wrote, including that whereas about “~$2.8M of the stolen funds stay within the hacker’s wallets (Bitcoin/EVM/Solana), the majority – >$4M in cryptos – has been despatched to CEXs,” with a breakdown of “~$3.3M to ChangeNOW, ~$340K to Fixed Float, & ~$447K to Kucoin.”
One extra strain level surfaced shortly: compensation. ZachXBT mentioned, “I presently have many involved victims contacting me by way of DM so can your workforce please make clear if you’ll be providing any compensation for Trust Wallet Browser Extension customers.” Trust Wallet didn’t reply that straight in public. Instead, it replied that its buyer assist workforce was already in contact with impacted customers relating to subsequent steps and directed individuals to succeed in out by way of its assist channel.
So what ought to customers do now, in plain phrases? If you’re on extension model 2.68, Trust Wallet’s instruction is to cease utilizing it as-is: disable it and improve to 2.69 earlier than you open it once more. If you suppose you had been affected, the corporate is routing customers to assist, whereas unbiased investigator ZachXBT is asking for reviews to assist map theft flows.
UPDATE: Binance founder Changpeng Zhao confirmed by way of X that consumer shall be compensated for the hack. “So far, $7m affected by this hack. Trust Wallet will cowl. User funds are SAFU. Appreciate your understanding for any inconveniences triggered. The workforce continues to be investigating how hackers had been in a position to submit a brand new model,” Zhao wrote right this moment.
At press time, the full crypto market cap stood at $2.95 trillion.
