A massive hack has struck Trust Wallet, one of the most widely used crypto wallets, resulting in estimated losses exceeding $6 million. The attack affected hundreds of users and underscores the vulnerability of browser extensions in the digital asset ecosystem.
The breach, reported on December 24, 2025, was triggered by a malicious update to Trust Wallet’s browser extension, version 2.68. Hidden within what appeared to be a legitimate update was code designed to siphon off funds as soon as users entered their recovery seed phrases.
Blockchain researcher ZachXBT confirmed that hundreds of wallets were emptied within minutes. The stolen assets spanned multiple chains, with roughly 40% in Solana (SOL), 35% in EVM-compatible tokens, and 25% in Bitcoin (BTC). The speed and scale of the theft shocked the crypto community, highlighting the dangers of internet-connected wallet tools and the difficulty for users to react in real time.
Security experts, including Vladimir S., identified the incident as a supply chain attack. Instead of originating from a compromised account or user error, the malicious code was embedded directly in the official update itself.
As a result, users who installed version 2.68 and entered their seed phrases inadvertently authorized the immediate transfer of their funds to unknown addresses. Trust Wallet has urged affected users to disable the compromised extension immediately and update to version 2.69, which is available on the Chrome Web Store.
Importantly, mobile versions of the wallet remained unaffected, limiting the scope of the breach. This episode demonstrates the unique risks posed by browser extensions and the importance of validating the source of updates before installation.
The financial and psychological impact of the hack has been severe. Victims face immediate losses, and the incident has intensified distrust toward digital wallets. While some in the crypto community, including influencers and analysts, are calling for Trust Wallet to provide compensation, users must take proactive steps to protect themselves.
Recommendations include avoiding entry of seed phrases in unsecured environments, transferring funds to hardware wallets if possible, and closely monitoring transactions for any suspicious activity. Updating to the secure version of the extension is critical, as is general vigilance in handling digital assets.
The Trust Wallet breach serves as a stark reminder that securing crypto holdings is an ongoing challenge, and it raises pressing questions about whether platforms are doing enough to protect their users from sophisticated scams.
A surge in deceptive XRP airdrop ads, featuring Ripple CEO Brad Garlinghouse, has flooded online platforms. The ads, prominently seen on YouTube and X (formerly Twitter), employ sophisticated artificial intelligence to fabricate Garlinghouse's endorsement, enticing users to send XRP for a promised airdrop. Despite YouTube's safeguards, these scams persist, gaining traction on X.
JoyThe funding structure includes rapid grants (below 20,000 mkUSD), community grants (20,000-100,000 mkUSD), and large grants (exceeding 100,000 mkUSD).
AlexSouth Korea Excludes Non-Custodial Virtual Asset Wallets from Overseas Financial Account Declarations
AlexA recent study unveils a surprising trend in Norway, where less than 1 in 10 individuals show interest in investing in cryptocurrencies. Intriguingly, men are twice as likely to consider crypto investments compared to women.
JoyBoth Solscan and Etherscan share a vision of offering neutral and equitable access to blockchain data, emphasising transparency and fairness in the blockchain space.
AlexMATIC Polygon's promising performance hints at a potential surge towards $1.20, buoyed by industry momentum and bullish projections. Analysts and patterns foresee a significant upward trajectory, fostering anticipation for Polygon's continued ascent.
JoyCEO Bill Lou lost $125,000 in stETH to a deceptive LFG token airdrop scam via a phishing attack. The incident underscores the rampant threat of phishing in crypto, urging users to stay vigilant and verify sources for secure transactions.
JoyRipple Labs is spearheading a transformation in global IT payments, with blockchain technology at the helm, promising swifter, more secure transactions.
BrianMicroStrategy's Saylor is selling company shares worth $216 million to increase his Bitcoin holdings, while maintaining a significant stake in the company.
KikyoCryptocurrency-based gambling on the outcome of Taiwan's presidential election has surged, attracting nearly $700,000 in wagers. Authorities are cracking down on illegal activities, emphasizing the importance of avoiding legal violations during this sensitive election period.
Joy