Trust Wallet users have lost more than $7 million after a compromised update to the wallet’s Chrome browser extension, according to blockchain investigators and the company itself.

The stolen funds will be fully reimbursed, Binance co-founder Changpeng Zhao (CZ) confirmed.

The security issue was first reported on December 25 by on-chain investigator ZachXBT, who warned that multiple Trust Wallet users had their funds drained shortly after a new Chrome extension update was released. Trust Wallet later confirmed the breach.

Trust Wallet is a popular crypto wallet that stores private keys used to access and transfer digital assets. When attackers gain access to these keys, they can move funds without the owner’s consent.

According to Trust Wallet, the incident only affects version 2.68 of its Chrome extension. Users are strongly advised not to open this version and to immediately update to version 2.69, which contains a security fix. The company clarified that mobile app users and other browser extensions are not affected.

Changpeng Zhao stated that Trust Wallet will reimburse all users who suffered losses due to the breach, helping ease concerns among affected customers.


Buy ExpressVPN with PayPal or Credit Card

Trust Wallet has not yet shared full technical details of how the malicious code was introduced, but said an investigation is ongoing.

Advertisement
READ
FBI Warns Silent Ransom Group Is Targeting U.S. Law Firms With In-Person Data Theft Attacks