Bitcoin

when

would

<img width="862" height="575" src="https://www.cryptobreaking.com/wp-content/uploads/2025/12/Trust-Wallet-Suffers-7M-Hack-on-Christmas-Day-Binance-s-CZ-Commits-to-Full-User-Reimbursement-scaled.jpg" class="webfeedsFeaturedVisual wp-post-image" alt="Trust Wallet Suffers $7m Hack On Christmas Day, Binance's Cz Commits To Full User Reimbursement">On December 25, 2025, Trust Wallet Browser Extension users were targeted by a sophisticated hack that resulted in the theft of approximately $7 million&nbsp;worth of cryptocurrency.The breach primarily targeted version 2.68 of the Chrome extension and was based on a hacker-developed backdoor that stole the private keys and mnemonic data of affected individuals, subsequently exporting the information to the hacker’s server.According to on-chain analyst ZachXBT, who reported that the attack affected hundreds of individuals and compiled a list of theft addresses spanning EVM chains, <a class="thirstylink" href="https://med.etoro.com/B10215_A67747_TClick_Scb-bitcoin.aspx?TargetURL=https://www.etoro.com/markets/btc" rel="noopener noreferrer nofollow">Bitcoin</a>, and <a class="thirstylink" href="https://med.etoro.com/B10215_A67747_TClick_Scb-solana.aspx?TargetURL=https://www.etoro.com/markets/sol" rel="noopener noreferrer nofollow">Solana</a>.The hacker behind the attack is said to have started preparations for the attack as early as December 8, 2025, and gained access to Trust Wallet’s source code repository. On December 22, the malicious code was integrated into the update for the extension, which was then labeled with harmless-sounding “analytics” features.The backdoor was then set to activate on Christmas Day, when the extraction of funds from affected wallets began. The malware code had warning signs, including connections to a dubious domain, “https://trustwallets.org,” which experts believe should have been flagged by basic automated audits or manual checks.A security researcher pointed out that this domain was rather fishy, pointing toward the lack of protection against calls from external URL addresses.Trust Wallet identified the issue on December 25, 2025. In an<a href="https://x.com/trustwallet/status/2004316503701958786" rel="noopener noreferrer nofollow"> official statement</a>, the company announced, “We advise those affected to turn off their client v2.68 and update to v2.89 via the official Chrome Web Store.”The hack only affected desktop browser extension users, leaving mobile app users and other extension versions untouched.Analysts from SlowMist and blockchain expert <a href="https://x.com/anndylian/status/2004414518181699872" rel="noopener noreferrer nofollow">Anndy Lian</a> believed that the attacker is well familiar with Trust Wallet’s codebase, suspecting it’s probably an insider job. <a class="thirstylink" href="https://binance.pxf.io/P0PnDj?refcode=20181193" rel="noopener noreferrer nofollow">Binance</a> co-founder Changpeng Zhao (CZ) shared similar beliefs and assessments in a response on X, labeling it “most likely an inside attack.”The attack is a testament to the vulnerabilities in crypto wallets, where individual compromises represented 37% of stolen value in 2025, not counting major exchange breaches like <a class="thirstylink" href="https://partner.bybit.com/b/cryptobreaking" rel="noopener noreferrer nofollow">Bybit</a>’s $1.4 billion loss in February 2025. It serves as another example of aggressive hacking tactics in the decentralized finance ecosystem.<h2 id="response-reimbursement-and-broader-implications">Response, Reimbursement, and Broader Implications</h2>Following the attack, CZ <a href="https://x.com/cz_binance/status/2004397190819783013" rel="noopener noreferrer nofollow">stated</a> on December 26, 2025, that Trust Wallet would fully compensate the $7 million in losses.This decision is in line with the user-protecting culture at <a class="thirstylink" href="https://binance.pxf.io/P0PnDj?refcode=20181193" rel="noopener noreferrer nofollow">Binance</a>, as CZ stated that there were still investigations to determine how such an ‘evil’ version was submitted to the Chrome Store.According to ZachXBT, he had been contacted directly by several victims with whom he compiled information on the scam addresses. While the quick reimbursement was seen as a positive step by some victims, other community members disagreed and criticized the decision over inconsistencies in handling similar attacks from 2023.Trust Wallet’s team is still investigating the attack, as CZ suggested potential insider collusion could be a reason to make internal changes within the organization.Some community members are pushing for improved security measures, including compulsory code audits and advanced phishing detection in updates. Following the hack, there have been debates on the dangers of using browser extensions versus mobile wallets, with suggestions to switch to mobile wallets for better security.This article was originally published as <a href="https://www.cryptobreaking.com/trust-wallet-suffers-7m-hack/?utm_source=rss&amp;utm_medium=syndication&amp;utm_campaign=article_footer" rel="noopener noreferrer nofollow">Trust Wallet Suffers $7M Hack on Christmas Day, Binance’s CZ Commits to Full User Reimbursement</a> on <a href="https://www.cryptobreaking.com/?utm_source=rss&amp;utm_medium=syndication&amp;utm_campaign=article_footer" rel="noopener noreferrer nofollow">Crypto Breaking News</a> – your trusted source for crypto news, Bitcoin news, and blockchain updates.

Trust Wallet Suffers $7M Hack on Christmas Day, Binance’s CZ Commits to Full User Reimbursement

Table of Contents

Crypto Breaking News

Other articles published on Dec 27, 2025

What is Gift Fest? Telegram’s Latest Trending Mini-app

What is Run For Pi? Pi Hackathon 2025 Third Place Winner

Avalanche Powers Onchain Prize Redemptions for MyPrize Social Casino Platform

Hyper Foundation Proposes Burning $900M Worth of HYPE

Solana in 2025: A Look at the Network’s Biggest Developments

ION Weekly Roundup: Key Updates as ION Migration Set to Kick Off

Join our free newsletter for daily crypto updates!