Möjlig hackning av Trust Wallet-webbläsartillägget: Miljontals stulna från användare

On Christmas Day, the crypto community faced a serious security incident involving the popular Trust Wallet. According to reports from independent blockchain researcher ZachXBT, numerous users reported theft of funds from their wallets after updating the browser extension version. Preliminary estimates of losses exceed $6 million, and the number of victims reaches hundreds.

According to information from ZachXBT, published in his Telegram channel, funds disappear immediately after authorization in the Chrome extension. It is assumed that the cause was a vulnerability introduced in the December 24 update (version 2.68), which may have been the victim of a supply chain attack. Users report that funds are automatically transferred to unknown addresses, affecting various networks, including Solana, EVM chains, and Bitcoin.

An official statement from Trust Wallet appeared on the X platform, where the team acknowledged a "security incident" affecting exclusively version 2.68 of the browser extension. They advise users to immediately disable the extension and update it to version 2.69 via the official Chrome Web Store. Mobile users and other extension versions are unaffected. The team assures that they are actively working on the issue and promises further updates. In responses to the post, users express outrage, demanding compensation, and share tips on how to safely update the wallet (for example, turning off Wi-Fi before deactivating the extension).

Warnings are spreading among the community:

"Do not use the Trust Wallet extension until there is official confirmation of safety," writes one user on X.

Others advise transferring funds to other wallets and checking approvals using tools like Revoke.cash. This incident is a reminder of the risks in DeFi and Web3, where even minor interactions can lead to significant losses, as in recent cases with Yearn Finance or ThirdWeb.

Experts emphasize the importance of basic security measures in 2025: regular revocation of approvals, use of hardware wallets, and verification of updates from official sources. While the investigation continues, Trust Wallet, which serves over 220 million users, faces pressure regarding compensation and enhanced protection. The situation is developing, and we will monitor updates.