+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: TrustWallet Chrome Extension Hacked Users Reporting Millions in Losses (/showthread.php?tid=6316884)
TrustWallet Chrome Extension Hacked Users Reporting Millions in Losses - MadScientist - Dec 30, 2025
Many Trust Wallet users saw their wallets drained of over $7 million after a security breach in the Chrome browser extension version 2.68.0, released on December 24, 2025.
Blockchain investigator ZachXBT first flagged the incident on X, noting a surge in unauthorized outflows from affected addresses shortly after users interacted with the extension.
Reports emerged on Christmas Eve, with victims sharing screenshots of emptied portfolios, including significant holdings in ETH, BTC, SOL, and BNB.
One user claimed a $300,000 loss in minutes after simple authorization, with transactions funneled to multiple attacker-controlled addresses. PeckShield estimated initial losses at $6 million; Trust Wallet later confirmed approximately $7 million across hundreds of wallets.
The attack coincided with the Chrome Web Store extension update, affecting desktop users but sparing the mobile app. Security firm SlowMist issued an alert, describing a potential supply-chain compromise in which malicious code was injected upstream.
Malicious Code Exposed
Researchers examined a compromised bundle and found a JavaScript file named 4482.js that was masquerading as PostHog analytics. The obfuscated script activated on seed phrase import, silently exfiltrating sensitive wallet data, including recovery phrases, to api.metrics-trustwallet.com, a domain registered days earlier and mimicking official branding.
Source - https://cybersecuritynews.com/trustwallet-chrome-extension-hacked/
RE: TrustWallet Chrome Extension Hacked Users Reporting Millions in Losses - RangoWorld - Dec 31, 2025
I still can't believe people keep thousands of dollars on an extension version of a software. Without even a breach like this. It's still one of the most unsafe ways to hold crypto.
RE: TrustWallet Chrome Extension Hacked Users Reporting Millions in Losses - DewGho - Dec 31, 2025
(Dec 31, 2025 12:26 AM)RangoWorld Wrote: I still can't believe people keep thousands of dollars on an extension version of a software. Without even a breach like this. It's still one of the most unsafe ways to hold crypto.
Yes, I agree it's dangerous. But is there a way out?
Are there any other options for storing your cryptocurrency in a decentralized way?
There aren't really any options (
I'm not referring to Bitcoin, Litecoin, or Monero.
I'm referring to other decentralized coins and tokens.
RE: TrustWallet Chrome Extension Hacked Users Reporting Millions in Losses - Rahul007rhp - Dec 31, 2025
Damn thats huge hope people can recover their loss :(