Key takeaways
- Trust Wallet users were hit by an exploit expansion that drained more than $6 million from their wallets over Christmas.
- Trust Wallet confirmed the incident on social media, saying that only browser extension version 2.68 was affected.
Trust Wallet on Thursday confirmed a security incident affecting version 2.68 of its Chrome extension and urged users to disable the extension and upgrade immediately. The team said its mobile app and other versions of the browser extension were not affected.
We have identified a security incident only affecting version 2.68 of Trust Wallet Browser Extension. Users with browser extension 2.68 should disable it and upgrade to version 2.69.
Please refer to the official Chrome Webstore link here:
Note: Mobile users only…
— Trust Wallet (@TrustWallet) December 25, 2025
The incident was first reported by on-chain detective ZachXBT on December 25. According to the analyst, many Trust Wallet users suffered withdrawals following an unauthorized update. has Chrome extension it happened the day before.
At the time of the initial report, more than $6 million had been withdrawn from affected wallets.
The exact technical cause has not yet been confirmed. Trust Wallet said an investigation is ongoing and the team will share updates as they become available.