TrustWallet Chrome Extension Hacked – Users Reporting Millions in Losses

Trust Wallet's Chrome extension v2.68.0 was compromised via a malicious bundled JavaScript (4482.js) that triggered on seed import and exfiltrated recovery phrases to a fraudulent domain, enabling attackers to drain roughly $7M from hundreds of wallets across multiple chains; the compromise appears to be a supply‑chain attack tied to a malicious extension update and related phishing sites, with remediation steps and a promised refund process communicated by Trust Wallet.