CCT - Crypto Currency Tracker logo CCT - Crypto Currency Tracker logo
cryptonews 2026-01-01 20:17:14

Trust Wallet Goes Dark on Chrome – $7M Hack Victims Left Waiting for Claims Tool

Trust Wallet users affected by a recent browser extension hack are facing fresh delays after the wallet provider confirmed that its Chrome extension has been temporarily removed from the Chrome Web Store. This resulted in slowing the rollout of a key claims verification tool tied to the incident. Trust Wallet chief executive Eowyn Chen said the extension became unavailable after the company encountered a Chrome Web Store bug while attempting to release a new version. Some may have noticed that the @trustwallet Browser Extension is temporarily unavailable on the Chrome Web Store. We hit a Chrome Web Store bug while releasing a new version that includes a feature to help reimbursement claimants submit verification codes from their extension… — Eowync.eth (@EowynChen) December 31, 2025 The delayed update was meant to introduce a verification feature designed to help victims of the Christmas Day hack confirm wallet ownership and submit reimbursement claims securely. Chen said Google has acknowledged the issue and is escalating it internally, while warning users to stay alert for fake or impersonated versions of the extension circulating online. Attackers Exploited Fake Trust Wallet Update to Steal Funds The outage comes as Trust Wallet continues to manage the fallout from a security breach that began unfolding in late December. On December 25, the company confirmed that a malicious version of its Chrome browser extension , version 2.68, had been distributed through the Chrome Web Store outside its normal release process. The compromised extension allowed attackers to access sensitive wallet data and execute unauthorized transactions, leading to millions of dollars in losses. Multiple Trust Wallet users experienced unauthorized fund outflows on Thursday due to a new browser extension theft. Losses are estimated to surpass $6 million. #TrustWallet #CryptoTheft #TrustWalletTheft https://t.co/mchzwWAHK3 — Cryptonews.com (@cryptonews) December 26, 2025 Trust Wallet’s internal investigation shows that only users who installed version 2.68 and logged into their wallets between December 24 and December 26 were affected. Mobile app users, users on other extension versions, and those who installed or logged in after December 26 were not impacted. The company said it identified 2,520 wallet addresses that were drained during the incident, with roughly $8.5 million in assets linked to 17 attacker-controlled wallets. The wallet, though, noted that some of those attacker addresses also targeted wallets unrelated to Trust Wallet. Security researchers later confirmed that the malicious build appeared legitimate and passed Chrome’s review process but contained hidden code capable of extracting recovery phrases. Several users said simply importing a seed phrase into the extension triggered immediate fund outflows across multiple blockchains. Trust Wallet Cleans Up Extension Hack; Flags Rise in Fake Compensation Scams Trust Wallet traced the breach back to a wider supply chain attack known as Sha1-Hulud, which surfaced in November and affected multiple companies through compromised developer tooling. The company said exposed GitHub secrets and a leaked Chrome Web Store API key allowed the attacker to upload the malicious extension directly, bypassing internal approval checks. In response, Trust Wallet rolled back to a clean release, published version 2.69, and disabled compromised publishing credentials. It also declared a voluntary reimbursement scheme, which they promised to all those people who were found to be victims. On December 29, it opened a formal claims process , where users are asked to provide wallet addresses, transaction hashes, and identifying information via an official support portal. In its response to over 5,000 claims, the company indicated that it has been inundated with claims, given that the number of verified affected wallets is much lower, and it is a cause of concern that there could be duplicate or fake claims. It is the cause of that discrepancy that led to the creation of another verification mechanism that was supposed to be provided with the next update of the browser extension, but was delayed by the Chrome Web Store problem. Source: Chainalysis The event continues to add to an increasing number of wallet-related escapades in the crypto industry. Industry data shows that the proportion of personal wallet compromises has continued to increase as the share of stolen funds. The post Trust Wallet Goes Dark on Chrome – $7M Hack Victims Left Waiting for Claims Tool appeared first on Cryptonews .

阅读免责声明 : 此处提供的所有内容我们的网站,超链接网站,相关应用程序,论坛,博客,社交媒体帐户和其他平台(“网站”)仅供您提供一般信息,从第三方采购。 我们不对与我们的内容有任何形式的保证,包括但不限于准确性和更新性。 我们提供的内容中没有任何内容构成财务建议,法律建议或任何其他形式的建议,以满足您对任何目的的特定依赖。 任何使用或依赖我们的内容完全由您自行承担风险和自由裁量权。 在依赖它们之前,您应该进行自己的研究,审查,分析和验证我们的内容。 交易是一项高风险的活动,可能导致重大损失,因此请在做出任何决定之前咨询您的财务顾问。 我们网站上的任何内容均不构成招揽或要约