Due to a security vulnerability in the Trust Wallet Google Chrome browser extension, users lost approximately $7 million. The suspicious transactions were first identified by crypto investigator ZachXBT, who observed that the funds disappeared shortly after the latest update of the browser extension.
Trust Wallet management has confirmed the hacker attack. It was revealed that the vulnerability existed only in version 2.68 of the browser extension. The company has urged users to immediately update to version 2.69 and to avoid opening the browser extension until the update is completed. There is no risk to users who are on other versions or who access their wallets only via smartphone.
Changpeng Zhao, founder of Binance and owner of Trust Wallet, stated that as of December 26, 2025, total losses amount to $7 million. The company has committed to fully compensating affected users. An internal investigation is currently underway to determine how hackers were able to upload malicious software to the official store.
