America

JPMorgan

Impact

Rare

Trust Wallet has opened a formal reimbursement process for users who lost funds after malicious code was discovered in a recent version of its Chrome browser extension, marking one of the company’s most significant <a href="https://yellow.com/news/trust-wallet-confirms-dollar7m-hack-through-compromised-browser-extension" rel="noopener noreferrer nofollow">security responses to date.</a>
The wallet provider <a href="https://trustwallet-support.freshdesk.com/support/tickets/new" rel="noopener noreferrer nofollow">said</a> affected users can now file claims through an official portal, where they must submit basic identity details along with the compromised wallet addresses, attacker addresses, and transaction hashes linked to the theft.
Trust Wallet said it would cover all verified losses and emphasized that each submission will undergo detailed review to prevent further risk.
The company confirmed that roughly $7 million in digital assets were siphoned from users across several blockchains, including <a href="https://yellow.com/asset/btc" rel="noopener noreferrer nofollow">Bitcoin</a>, <a href="link" rel="noopener noreferrer">Ether</a>, and Solana.
Blockchain security firm PeckShield <a href="https://x.com/PeckShieldAlert/status/2004382831158714735?s=20" rel="noopener noreferrer nofollow">reported</a> that more than $4 million had already been routed through centralized exchanges such as ChangeNOW, FixedFloat, and KuCoin, while nearly $3 million remained in wallets controlled by the attacker as of Thursday.
Binance founder Changpeng Zhao, whose company acquired Trust Wallet in 2018, said the losses would be made whole. “TrustWallet will cover,” he <a href="https://x.com/cz_binance/status/2004397190819783013?s=20" rel="noopener noreferrer nofollow">wrote</a> on X, adding that user funds “are SAFU.”
Also Read: <a href="https://yellow.com/news/why-jpmorgan-is-cutting-off-stablecoin-neobanks-in-latin-america-despite-crypto-friendly-messaging" rel="noopener noreferrer nofollow">Why JPMorgan Is Cutting Off Stablecoin Neobanks In Latin America Despite Crypto-Friendly Messaging</a>
<h2 id="how-the-breach-occurred">How The Breach Occurred</h2>
The issue surfaced on Christmas Day, when onchain analyst ZachXBT warned that users were reporting sudden fund drains after updating to the extension’s December 24 release.
Trust Wallet issued a patched version on December 25.
According to CEO Eowyn Chen, the attack stemmed from a leaked Chrome Web Store API key, which allowed a malicious build of the extension to be published outside of the company’s internal release pipeline.
Security researchers at SlowMist <a href="https://x.com/SlowMist_Team/status/2004505097049628846?s=20" rel="noopener noreferrer nofollow">found</a> that the rogue version used a modified analytics library to steal seed phrases.
Users who accessed the compromised extension before December 26 at 11 a.m. UTC were potentially exposed, Trust Wallet said.
<h2 id="impact-and-user-scope">Impact And User Scope</h2>
The incident affected only the Chrome extension version 2.68; mobile app users and those running other extension builds were not impacted.
Trust Wallet’s extension has around one million users, <a href="https://chromewebstore.google.com/detail/trust-wallet/egjidjbpglichdcondbcbdnbeeppgdph" rel="noopener noreferrer nofollow">according</a> to its Chrome Web Store listing.
Read Next: <a href="https://yellow.com/news/bitcoin-breaks-downtrend-rare-market-signals-hint-at-multi-week-rally" rel="noopener noreferrer nofollow">Bitcoin Breaks Downtrend, Rare Market Signals Hint At Multi-Week Rally</a>

Trust Wallet Launches Compensation Program After Chrome Extension Hack Drains $7M

Table of Contents

Yellow News

Other articles published on Dec 27, 2025

Join our free newsletter for daily crypto updates!