Trust Wallet says 2,596 wallets drained in $7 million crypto theft attack
ID: 3fa2105e-9014-50a3-9828-7cf878805e5b
STIX ID: report--3fa2105e-9014-50a3-9828-7cf878805e5b
Feed Name: Bleeping Computer
Threat Score
Trust Wallet's Chrome extension release v2.68.0 was compromised on Dec 24, 2025 — attackers published a malicious build (likely via a leaked Chrome Web Store API key) that included JavaScript to exfiltrate wallet recovery data, leading to roughly $7M stolen from about 2,596 affected wallet addresses; Trust Wallet pushed an update (v2.69), expired release APIs, had the malicious domain suspended, and is processing reimbursements while warning users about phishing and impersonation scams.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.