Trust Wallet Browser Extension Breach Results in Over $6 Million in Losses
Trust Wallet has confirmed a security breach affecting its Browser Extension version 2.68. Users are advised to disable this version and upgrade immediately to version 2.69 to prevent further losses.
The initial impact of the breach exceeds $6 million, with losses in SOL, BTC, and EVM tokens. It is estimated that hundreds of users have been victimized by this incident. Hackers exploited a compromised update to the extension that allowed them to extract seed phrases after users imported their information. With these seed phrases, the attackers drained wallets across multiple users.
Data from Arkham indicates that stolen funds moved through several receiving addresses across different wallets, suggesting a coordinated cross-wallet exfiltration effort. Trust Wallet has clarified that mobile-only users and those using other versions of the extension were not affected by this breach.
Security analyst ZachXBT alerted the community about the issue, highlighting that hundreds of victims had emerged since the breach was discovered. Some users reported losses on Christmas Day, including one claiming that over $300,000 was drained within about four minutes.
In response, Trust Wallet is actively engaging with affected users through customer support and providing guidance on the next steps to mitigate further damage.
