.jpeg)
A significant security breach has impacted Trust Wallet users, with the cryptocurrency wallet provider confirming a vulnerability in its browser extension version 2.68. The exploit, which occurred on December 25th, resulted in the unauthorized draining of over $6 million in digital assets from hundreds of users across various cryptocurrencies, including SOL, BTC, and EVM tokens. Mobile-only users and those using other extension versions were not affected.
Key Takeaways
-
Trust Wallet's browser extension version 2.68 was compromised, leading to an estimated loss of over $6 million.
-
The incident affected hundreds of users, with funds drained across SOL, BTC, and EVM tokens.
-
Users are urged to disable version 2.68 and update to version 2.69 immediately.
-
Mobile-only users and other extension versions remained unaffected.
The Security Incident Unfolds
The security incident came to light when on-chain investigator ZachXBT alerted the community on Telegram about multiple Trust Wallet users reporting sudden and unauthorized fund transfers. These reports emerged shortly after Trust Wallet released an update to its Chrome browser extension. Trust Wallet later confirmed that version 2.68 of its browser extension was the sole point of vulnerability.
Impact and Affected Assets
Initial estimates suggest that over $6 million was stolen. The attackers reportedly moved funds through multiple addresses, making it challenging to track the exact flow. Affected assets included Solana (SOL), Bitcoin (BTC), and various Ethereum Virtual Machine (EVM) compatible tokens. Reports indicate that funds vanished rapidly, sometimes within minutes of users importing their seed phrases into the compromised extension.
Trust Wallet's Response and User Guidance
Trust Wallet has urged all users of the affected browser extension version 2.68 to immediately disable it and upgrade to version 2.69. The company stated that its team is actively investigating the root cause of the exploit and promised to provide further updates. While compensation plans have not yet been announced, Trust Wallet has been in touch with impacted users regarding next steps.
Broader Security Implications
This breach underscores the persistent security risks associated with browser extensions, which often require extensive access to user systems. The incident is part of a larger trend of increasing cryptocurrency theft, with billions lost annually through various exploits, including phishing, compromised third-party services, and wallet vulnerabilities. Experts continue to emphasize the importance of vigilance, timely software updates, and considering more secure options like hardware wallets for significant holdings.
Sources
-
Trust Wallet Extension v2.68 Breach Confirmed on Dec 25, Losses Top $6M, BingX.
-
Trust Wallet Hack News: Trust Wallet Browser Extension Hack Triggers $6M User Losses, Live Bitcoin News.
-
Trust Wallet Chrome Extension Hack Drains Over $6M from Users: ZachXBT, The Crypto Times.
-
Trust Wallet Browser Extension Compromised, Drains Over $6M User Funds, XT.com.
-
Hackers Exploit Trust Wallet Flaw, Siphon $6M in Digital Assets, AInvest.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.