Trust Wallet Launches Compensation Process Following $7M Chrome Extension Hack
Trust Wallet has initiated a formal compensation process for users impacted by a recent security breach involving its Chrome extension. The incident stemmed from malicious code introduced in an update to version 2.68 of the extension, which compromised seed phrases and allowed attackers to immediately drain funds from affected wallets. The compromised Chrome extension boasts approximately one million users, but the mobile app and other extension versions were not affected.
Users affected by the breach are required to submit claims through an official support form, providing details including email, country of residence, compromised wallet addresses, suspected attacker addresses, and relevant transaction hashes. Claim reviews will be prioritized, and verified victims will receive compensation. Binance founder Changpeng Zhao stated that all verified losses will be reimbursed. The total estimated losses across Bitcoin, Solana, and Ethereum-compatible networks amount to around $7 million, with hundreds of victims reported. While some users claimed losses as high as $300,000, investigators have flagged specific claims as suspicious.
The attack exploited the Chrome extension's update mechanism and relied on the extension's elevated permissions to access users' seed phrases when they were entered, resulting in immediate fund theft. Users were advised to disable the affected version 2.68 and upgrade to version 2.69 to mitigate the risk.
In a broader context, Chainalysis data indicate a rise in wallet-related exploits in 2025, with more than $3.4 billion stolen globally in the January to December period. The breach of Bybit accounted for a significant portion of that total.
Trust Wallet is taking steps to secure user funds, reportedly safeguarding these assets under SAFU measures.