Archive · 27 Dec 2025
Trust Wallet Hack: $7 Million Lost, Users Advised to Update
Trust Wallet, which is owned by Binance, had a problem with its Chrome extension.
Hackers stole over $7 million from users who had version 2.68 of the extension and logged in before 26 December, 11:00 UTC.
The company's CEO, Eowyn Chen, said that the stolen money will be given back to the affected users.
The company is still trying to find out how the hackers got into the new version.
Users who are affected should not open the old version and should update to version 2.69 to keep their money safe.
Mobile users and those with other versions of the extension are not affected.
The company has taken steps to stop the hack, like suspending the malicious domain and expiring release APIs.
People on social media had different reactions, with some asking for more explanations and others expressing concern about the company's reputation.
Trust Wallet's Chrome extension version 2.68 was hacked, resulting in a loss of over $7 million.
The breach only affected users who opened and logged into version 2.68 before 26 December, 11:00 UTC.
Mobile-only users and other browser extension versions are unaffected.
The company has suspended the malicious domain, expired release APIs, and is processing reimbursements for affected users.
The investigation suggests the malicious extension was published externally through Chrome Web Store API key, bypassing standard release checks.
- Who
- Users of Trust Wallet Browser Extension version 2.68 who logged in before 26 December, 11:00 UTC
- What
- A security breach resulting in the loss of over $7 million
- When
- 25 December 2023, after the release of version 2.68
- Where
- Trust Wallet Browser Extension
- Why
- Due to a malicious code disguised as an analytics feature in version 2.68
- Total Amount Lost
- $7 million
- Affected Version
- Browser Extension 2.68
- Secure Version
- Browser Extension 2.69
- Impacted Users
- Users who opened and logged into Browser Extension 2.68 before 26 December, 11:00 UTC
- Unaffected Users
- Mobile-only users, other browser extension versions, and v2.68 users who logged in after 26 December, 11:00 UTC
- Company Response
- Investigation ongoing, malicious domain suspended, reimbursement processing, release APIs expired
- Company
- Trust Wallet (Binance-owned)
