Trust Wallet confirms extension hack led to $7 million crypto theft

A compromised Trust Wallet Chrome extension update (v2.68.0) released on December 24 contained hidden code that exfiltrated wallet seed phrases to a newly registered domain (metrics-trustwallet.com), leading to at least $7M in cryptocurrency theft; attackers also ran a phishing site (fix-trustwallet.com) to harvest recovery phrases. Trust Wallet quietly pushed v2.69 to remediate the issue and advised users to disable the extension, update, and move funds to new wallets.