2025-12-26 02:27:14

Trust Wallet browser extension exposes serious security vulnerabilities. According to on-chain security analyst ZachXBT, hundreds of users reported their wallet funds being wiped out in a short period, with total affected amount exceeding $6 million.

Trust Wallet officially confirmed the incident on social media, stating that the issue only occurred in version 2.68 of the browser extension, and the mobile and other versions are unaffected. The official urgently urges users still using version 2.68 to stop using it immediately and upgrade to version 2.69 to continue.

According to security team analysis, this vulnerability was most likely caused by a supply chain attack — meaning malicious code was directly embedded into the wallet's code. The specific attack details are still under investigation, but judging by the scale and speed of the theft, this is no small matter.

If you are using Trust Wallet, check your extension version now. Remove version 2.68 immediately and update to the latest version. Once such wallet vulnerabilities are exploited, the window of opportunity is very short. Don’t wait to become the next victim. This also serves as a reminder that even top-tier wallets must always stay vigilant about security.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

8 Likes

Reward
8
5
Repost
Share

Comment

0/400

HappyToBeDumped

· 5h ago

I'm an experienced person, and I was lucky not to fall into the 2.68 version trap... The issue of supply chain attacks really is hard to handle, even big wallets can't be trusted anymore.

View OriginalReply0

APY_Chaser

· 10h ago

Oh my God, 6 million USD. This supply chain attack is really incredible; even top wallets can be compromised. Oh no, it's the browser extension again. I need to check the version number quickly. There's really no reliable option, huh? No matter how big the project, hackers can still break through. Quickly upgrade to version 2.68; this window of opportunity could disappear in minutes. The supply chain has been breached, and there's nothing anyone can do to prevent it. Let's stick to multi-chain cold wallets; these extensions are really exhausting.

View OriginalReply0

liquiditea_sipper

· 10h ago

$6 million just disappeared like that. Supply chain attacks are really getting closer to us. Oh my god, even Trust Wallet has been compromised. Who can we trust anymore? Quickly check the version number, uninstall 2.68 directly, don't hesitate. I knew it, no matter how big the wallet is, it's useless. You still have to keep a close eye on your own. This time, I guess a bunch of people will be reverse-operating for financial freedom again.

View OriginalReply0

RektButStillHere

· 10h ago

Supply chain attacks are here, even top wallets can't stop them.

View OriginalReply0

GateUser-7b078580

· 10h ago

6 million USD lost, but... this data tells me that the speed of execution is ridiculously fast, and maybe someone has already been completely wiped out long ago.

View OriginalReply0