Trust Wallet Chrome Extension Breach Leads to $7M Crypto Loss

Trust Wallet Chrome Extension Breach Causes $7 Million Crypto Loss via Malicious Code

• Trust Wallet's Chrome browser extension was compromised through a supply chain attack, leading to an estimated $7 million in cryptocurrency theft from user wallets.
• The attack vector involved malicious code injected into the third-party open-source component dex-web-wallet that the extension relied upon.
• Users are advised to update their Trust Wallet Chrome extension to version 2.6.28 or later and consider moving funds to a hardware wallet as a precaution.

Source: The Hacker News | Date: December 16, 2025

Trust Wallet Warns Users to Update Chrome Extension Following $7 Million Security Loss

• Trust Wallet confirmed a significant security incident affecting its Chrome extension, where a flaw in a third-party dependency led to approximately $7 million in digital asset losses.
• The vulnerability allowed attackers to execute arbitrary code within the extension's environment, bypassing security measures and compromising user funds.
• An urgent update to Trust Wallet Chrome extension version 2.6.28 or above is critical for users to protect their cryptocurrency holdings from further exploitation.

Source: Security Affairs | Date: December 16, 2025

References

1. Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code - The Hacker News
2. Trust Wallet warns users to update Chrome extension after $7M security loss - Security Affairs