A security issue in the Trust Wallet browser extension has led to the loss of nearly $6 million in crypto, raising serious concerns among users during the Christmas period.
The problem affects Trust Wallet Browser Extension version 2.68 only, from Trust Wallet. Mobile app users and people using other extension versions are not affected.
What Happened?
On December 24, a flaw was discovered in version 2.68 of the Trust Wallet browser extension. By December 25, on-chain data showed that funds were being drained from multiple wallets across Bitcoin, Ethereum, and Solana networks.
Blockchain investigator ZachXBT reported receiving messages from hundreds of users who said their wallet balances suddenly dropped. Community researchers later found suspicious code in the extension that appeared to send wallet data to a fake website, allowing attackers to access funds.
Trust Wallet Confirms the Issue
Trust Wallet confirmed the security incident and said the issue is limited to version 2.68 of the browser extension. The company asked users to stop using that version immediately and upgrade to version 2.69, which it says is safe.
Trust Wallet also said its support team is already contacting affected users and investigating what happened. So far, there has been no official confirmation about compensation, though impacted users are being guided through next steps.
What To Do If You Are Affected
If you use the Trust Wallet browser extension, here’s what you should do right away:
1. Do not open the Trust Wallet extension on your desktop.
This helps prevent further risk.
2. Disable the extension immediately.
Go to your Chrome extensions page and switch Trust Wallet off.
3. Update to version 2.69 only from the official Chrome Web Store.
After updating, check the version number to confirm it shows 2.69.
4. Contact Trust Wallet support.
If your funds are missing, reach out to Trust Wallet’s official support page and report the issue.
Why This Matters
This incident shows the risks of browser-based crypto wallets, especially when malicious code slips into updates. Even trusted tools can become targets, and small delays in updating can lead to big losses.
Trust Wallet says it will share more updates as they become available.
