If you use the Trust Wallet extension on your browser, you need to check your version number immediately. Over the Christmas holiday, a sophisticated security breach targeted Trust Wallet’s Google Chrome extension, resulting in over <b>$7 million</b> being siphoned from hundreds of user accounts. While the mobile app remains safe, the browser-based version has been hit by what experts are calling a "supply chain attack."
<h2>What happened with the Trust Wallet Chrome extension breach?</h2>
[embed]https://twitter.com/TrustWallet/status/2004316503701958786[/embed]

The trouble started with <b>version 2.68</b> of the Trust Wallet browser extension. According to on-chain investigators like ZachXBT and security firm SlowMist, a malicious update was likely injected into the extension's code. This vulnerability allowed attackers to capture users' seed phrases—the "master keys" to their crypto—as soon as they unlocked their wallets. Once the hackers had these phrases, they quickly drained accounts of Bitcoin (BTC), Solana (SOL), and various Ethereum-compatible (EVM) tokens.
<h2>Is my Trust Wallet account at risk?</h2>
The good news is that this incident is highly specific. You are only at risk if you:
<ul>
 	<li aria-level="1">Use the Trust Wallet Chrome/Browser Extension.</li>
 	<li aria-level="1">We're running version 2.68 between December 24 and December 26, 2025.</li>
</ul>
<h3>Who is safe?</h3>
<ul>
 	<li aria-level="1"><b>Mobile App Users:</b> If you only use <a href="https://share.google/gx9K4bDrpquAXu8Ss">Trust Wallet</a> on your iPhone or Android, you are unaffected.</li>
 	<li aria-level="1"><b>Other Extension Versions:</b> Users on older versions or the newly released fix (v2.69) are not part of this specific breach.</li>
 	<li aria-level="1"><b>Hardware Wallet Users:</b> If your Trust Wallet was connected to a Ledger or Trezor, your private keys were never exposed to the extension's code.</li>
</ul>
<h3>How do I secure my Trust Wallet after the hack?</h3>
Trust Wallet developers acted quickly once the alarm was raised, releasing a patched version. If you use the extension, follow these steps immediately:
<ol>
 	<li aria-level="1"><b>Check your version:</b> Open your browser extensions and ensure you are on <b>version 2.69</b>.</li>
 	<li aria-level="1"><b>Update manually:</b> If you are still on 2.68, do not open the wallet. Go to the Chrome Web Store and force an update to 2.69.</li>
 	<li aria-level="1"><b>Migrate your funds:</b> If you opened v2.68 during the breach period, your seed phrase may be compromised. The safest move is to create an entirely new wallet (with a new seed phrase) and move your remaining assets there.</li>
</ol>
<h3>Will Trust Wallet refund the stolen $7 million?</h3>
In a move that has calmed much of the community's panic, Binance founder Changpeng Zhao (CZ) confirmed that the "User funds are SAFU" policy is in effect. Trust Wallet has officially announced that they will ensure all affected users are reimbursed for their losses. The team is currently in the process of identifying impacted addresses and setting up a compensation claim portal.

Trust Wallet Alert: $7 Million Drained in Major Chrome Extension Breach

A critical vulnerability in Trust Wallet's Chrome extension has led to a $7M loss. Learn if you're affected and how to secure your funds now.

Trust Wallet Alert: $7 Million Drained in Major Chrome Extension Breach

Top Picks