Wallet, a leading self-custody cryptocurrency wallet backed by Binance, has issued an urgent security warning to users after a significant vulnerability in its Chrome browser extension led to major crypto losses, underscoring heightened risk for browser-based wallet extensions in 2025. �
Cybernews
🚨 What Happened
A malicious or compromised version of the Trust Wallet Chrome browser extension (v2.68) was published to the Chrome Web Store between Dec. 24–26, 2025. �
Cybernews
Attackers embedded malicious code that captured sensitive seed phrases and allowed unauthorized access to user funds. �
SecurityWeek
This resulted in an estimated $6–8.5 million in crypto theft from thousands of wallets. �
Cybernews +1
📉 Impact on Users & Markets
Losses were reported across multiple chains and assets, including Bitcoin (BTC), BNB/BNB Smart Chain tokens, and other networks — as users’ wallets were drained following seed phrase exposure. �
CCN.com
Hundreds to thousands of wallet addresses were impacted, and public estimates of stolen funds vary between $6 million and $8.5 million. �
Cybernews +1
📢 Trust Wallet’s Response
Official Warning: Trust Wallet acknowledged the breach and warned users explicitly to disable the compromised extension version (2.68) and upgrade immediately to version 2.69. �
CryptoSlate +1
Security Patch: Version 2.69 was rolled out as an emergency patch to remove the malicious code and secure the release channel. �
CryptoSlate
Scope Clarified: Mobile apps and other non-Chrome extension versions were not impacted. �
CCN.com
💡 Wider Context & Security Takeaway
The exploit appears tied to a supply chain compromise involving leaked developer secrets, making the incident a broader warning about software distribution security in Web3. �
SecurityWeek
Security experts are urging users of hot wallets and browser extensions to consider hardware wallets for larger holdings due to inherent risks in web-based storage platforms. �
Cybernews
📌 What Users Should Do
If you use Trust Wallet’s Chrome extension:
Disable any extension version 2.68 immediately. �
MEXC
Update only from the official browser extension store to version 2.69 or later. �
MEXC
Move funds to a secure wallet (e.g., hardware wallet) if you suspect compromise.
Stay alert for impersonation scams or fake compensation forms circulating online
