Popular crypto wallet Trust Wallet came to the fore with a serious security crisis immediately after the Chrome browser extension was upgraded to version 2.68.0. In the user experiences shared on social media after the update, it was stated that the wallet balances of some users who entered seed phrases through the new version were completely emptied within minutes. Initial investigations show that the attack targets Bitcoin, Ethereum and BNB balances and could result in losses of millions of dollars. The events have reignited discussions about the security of browser plug-in-based wallets.
Suspicious Transfers Revealed in Blockchain
After the incident was heard, blockchain researcher ZachXBT, known for its movements within the Blockchain, detected unusual transfers from many Trust Wallet addresses in a short time. In the shared data, it was seen that after the update, consecutive transactions were made from the affected wallets and the balances were transferred to different addresses within seconds.
The striking point was that the fund outflows occurred all at once and aggressively, rather than piecemeal. It was stated that Bitcoin, Ethereum and BNB assets were quickly emptied in each case, and the funds were then distributed to numerous intermediate addresses. A recurring pattern of routing was observed in transactions within the blockchain, strengthening the possibility of a coordinated attack.
Alleged Loss of At Least 4.3 Million Dollars
Available blockchain data reveals that at least $4.3 million worth of cryptocurrencies have been associated with suspicious addresses so far. However, it is stated that this figure is calculated only based on publicly available data and the wallets reported by the victims, and the actual damage may be higher. ZachXBT also shared the main addresses where the funds were collected, emphasizing that these addresses withdraw assets from a large number of victim wallets and exhibit similar transaction patterns.
Following the developments, the Trust Wallet team released an official statement via X on December 26, 2025. In the statement, it was stated that the problem was caused by a security vulnerability that only affects the Trust Wallet Browser Extension version 2.68. Users were asked to immediately disable the extension and upgrade to version 2.69. The team stated that they were aware of the seriousness of the situation and that the investigation was actively continuing.
