Trust Wallet Browser Extension Exploit Leads to $6 Million Theft: Urgent Advisory Issued
A significant security breach has impacted numerous Trust Wallet users, resulting in unauthorized fund transfers totaling at least $6 million. On-chain detective ZachXBT first brought attention to the incident on December 25th, revealing hundreds of victims who experienced rapid, illicit withdrawals from their wallet addresses within a matter of hours.
We’ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69.
Please refer to the official Chrome Webstore link here: https://t.co/V3vMq31TKb
Please note: Mobile-only users…
— Trust Wallet (@TrustWallet) December 25, 2025
In response to the escalating reports, Trust Wallet issued an urgent advisory via its official X (formerly Twitter) account. The company confirmed a critical security vulnerability specifically affecting its browser extension version 2.68. Users were strongly urged to immediately disable version 2.68 and upgrade to version 2.69 exclusively through the official Chrome Web Store. Crucially, users should refrain from opening the compromised version until the update is complete. Trust Wallet clarified that its mobile application and other browser extension versions remain unaffected, and a dedicated team is actively investigating the root cause. As of December 26th, details regarding potential compensation for the affected users have not yet been released.
Understanding the Attack Vector
On-chain forensic analysis by leading monitoring firms revealed a consistent pattern: stolen funds were rapidly and automatically siphoned from compromised wallets into a specific cluster of addresses controlled by the attackers. This modus operandi is characteristic of browser extension or frontend compromises, where a malicious update or a critical vulnerability can facilitate unauthorized transaction signings or even expose private keys. The fact that Trust Wallet’s advisory was issued after the extension update has fueled significant community apprehension, raising questions about whether version 2.68 itself introduced or exposed the critical flaw.
Immediate Steps for Trust Wallet Users
As investigations unfold, Trust Wallet users, particularly those with digital assets, are advised to take immediate and proactive steps to safeguard their holdings:
- For Version 2.68 Users: If you have Trust Wallet Browser Extension version 2.68 installed, immediately disable it. Only upgrade to version 2.69 via the official Chrome Web Store link provided directly by Trust Wallet.
- Secure Remaining Assets: Transfer any remaining funds from potentially compromised wallets to a highly secure hardware (cold) wallet or a newly established wallet created using robust security protocols.
- Monitor and Report: Diligently review your wallet’s on-chain activity for any unauthorized transactions. Report any suspicious theft directly to Trust Wallet support, providing crucial evidence such as transaction hashes, timestamps, and your extension version to aid investigators in tracing the illicit fund movements.
Cybersecurity experts emphasize that swift action, meticulous evidence preservation, and collaborative efforts with cryptocurrency exchanges and on-chain analysts significantly enhance the prospects of tracking and potentially freezing stolen assets.
Disclaimer: This article is intended solely for the purpose of providing market information. All content and opinions expressed herein are for informational reference only and do not constitute investment advice. They do not necessarily reflect the views or positions of the author or the publisher. Investors are urged to conduct their own due diligence and make independent trading decisions. Neither the author nor the publisher shall be held liable for any direct or indirect losses incurred by investors as a result of their trading activities.
