Security Breach in Trust Wallet Browser Extension Results in Over $6 Million in Losses

Crypto wallet provider Trust Wallet has confirmed a security incident affecting a specific version of its browser extension, after on-chain investigator ZachXBT estimated initial losses at more than $6 million.

The issue came to light when ZachXBT alerted the crypto community, stating that multiple users had reported sudden and unexplained fund drains from their wallets within a short timeframe. While the precise root cause has not yet been publicly identified, the reports coincided with the release of a new Chrome browser extension update, raising suspicions about a possible connection.

Hundreds of Users Affected

According to preliminary findings shared by the investigator, hundreds of wallet addresses appear to have been compromised. The verified losses have surpassed $6 million, with the figure expected to evolve as additional cases are reviewed.

The affected addresses span multiple blockchain networks, including EVM-compatible chains, Bitcoin, and Solana, indicating the attack was not limited to a single ecosystem. The multi-chain scope has added complexity to the ongoing investigation.

ZachXBT urged impacted users to contact him directly via X (formerly Twitter) to assist in compiling a verified list of affected addresses.

Company Response and Mitigation Steps

In a public statement posted on X, Trust Wallet confirmed that the incident impacted version 2.68 of its browser extension. The company instructed users to immediately disable that version and upgrade to version 2.69.

Trust Wallet emphasized that mobile app users and other extension versions were not affected. As a precaution, users who had not yet updated were advised to avoid opening the extension until the new version was installed.

The company stated that its security team is actively investigating the breach and pledged to provide updates as more details emerge.

Binance Founder Pledges Compensation

Following the disclosure, Changpeng Zhao, founder of Binance and owner of Trust Wallet, said the company would fully reimburse affected users. He indicated that approximately $7 million had been impacted and assured users that compensation would cover all verified losses.

Rising Security Challenges in Crypto

The incident adds to a growing list of high-profile crypto security breaches in 2025. According to estimates from blockchain analytics firm Chainalysis, digital asset theft has exceeded $3.4 billion since the beginning of the year, slightly surpassing totals recorded during the same period last year.

The Trust Wallet breach underscores ongoing vulnerabilities in the digital asset sector, particularly as browser extensions and decentralized wallet tools remain prime targets for attackers.

Investigations into the root cause of the exploit remain ongoing, and further updates are expected as forensic analysis continues.