Flow

DeFi

Truebit

Read

<p>Truebit’s TRU token crashes over 99% after a 26 million dollar Ether exploit, extending a string of major DeFi security breaches despite falling aggregate losses.</p>
<div id="cn-block-summary-block_7a3850a869b6ebea60fbf73ca337409d" class="cn-block-summary">
 <div class="cn-block-summary__nav tabs">
  <span>Summary</span>
 </div>
 <div class="cn-block-summary__content">
  <ul>
   <li>Truebit reports a smart‑contract exploit that drained about 8,535 ETH, or roughly 26 million dollars, triggering a 99% crash in TRU’s price.​</li>
   <li>December also saw Flow’s 3.9 million dollar counterfeit token incident and a Trust Wallet Chrome extension hack costing users around 7 million dollars.​</li>
   <li>PeckShield data show total crypto hack losses fell to about 76 million dollars in December from 194 million in November, even as high‑profile breaches multiplied.</li>
  </ul>
 </div>
</div>
<p>Truebit acknowledged “an incident of security involving one or more malicious actors” tied to a smart contract address that suggests losses of about 26 million dollars in Ether. In a post on X, the team said it was in contact with law enforcement and was “taking all available measures” following the breach, but has not yet given a detailed technical post‑mortem.​</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>Today, we became aware of a security incident involving one or more malicious actors. The affected smart contract is 0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2 and we strongly advise the public not to interact with this contract until further notice. We are in contact with law…</p>— Truebit (@Truebitprotocol) <a href="https://twitter.com/Truebitprotocol/status/2009328032813850839?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">January 8, 2026</a>
  </blockquote>
 </div>
</figure>
<p>On‑chain analysts monitoring the protocol reported that the attacker siphoned off around 8,535 <a href="https://crypto.news/ethereum-and-xrp-charts-flash-rare-buying-signals-but-remittix-dominates-interest/" rel="noopener noreferrer nofollow">ETH</a>, valued at roughly 26.6 million dollars at the time. While the contract address flagged by Truebit shows only small amounts of stolen <a href="https://crypto.news/ethereum-price-stalls-coinbase-premium-gap-2026/" rel="noopener noreferrer nofollow">ETH</a>, blockchain sleuths such as <a href="https://crypto.news/electric-coin-company-distances-from-direct-funding-of-zcash/" rel="noopener noreferrer nofollow">Lookonchain</a> and others have pointed to a broader pattern of movements indicating that “the total amount of cryptocurrency stolen in the attack exceeded 26 million dollars.”​</p>
<p>Market reaction was brutal and immediate. According to data from Nansen, the price of Truebit’s TRU token plunged more than 99%, sliding from roughly 0.16 dollars to an all‑time low near 0.0000000029 dollars as reports of the exploit spread. At the time of publication, it remained unclear what exactly triggered the multi‑million‑dollar exploit or whether end‑user funds held on the protocol were directly at risk, and Cointelegraph noted that Truebit had not responded to a request for comment.​</p>
<p>You might also like: <a href="https://crypto.news/illicit-crypto-flows-hit-154b-as-sanctions-drive-record-on-chain-activity/" rel="noopener noreferrer nofollow"> Illicit crypto flows hit $154B as sanctions drive record on-chain activity </a></p>
<h2 class="wp-block-heading" id="flows-counterfeit-token-incident">Flow’s counterfeit token incident</h2>
<p>The Truebit breach follows a December in which multiple high‑profile exploits shook confidence in blockchain infrastructure. On 27 December 2025, the Flow Foundation disclosed that an attacker exploited a vulnerability in the Flow network to “counterfeit tokens, extracting approximately 3.9 million USD.”​</p>
<p>In its technical post‑mortem, Flow stressed that “no existing user balances were accessed or compromised” and that the attack duplicated assets rather than touching legitimate holdings. Validators coordinated a network halt within about six hours of the first malicious transaction, and most counterfeit assets were either frozen on‑chain or recovered and destroyed in coordination with exchanges.​</p>
<h2 class="wp-block-heading" id="trust-wallets-malicious-chrome-update">Trust Wallet’s malicious Chrome update</h2>
<p>Trust Wallet also faced a major security failure in late December when its Chrome browser extension was compromised. The company later confirmed that version 2.68 of the extension contained malicious code that enabled an attacker to access sensitive wallet data and drain user funds, ultimately leading to estimated losses of around 7 million dollars.​</p>
<p>Trust Wallet urged users to update immediately to version 2.69 and launched a reimbursement process, warning of secondary scams via fake compensation forms and impersonated support accounts. CEO Eowyn Chen said the malicious build “was most likely published externally through the Chrome Web Store API key, bypassing our standard release checks,” underscoring the supply‑chain dimension of the compromise.​</p>
<h2 class="wp-block-heading" id="industrywide-losses-and-security-trend">Industry‑wide losses and security trend</h2>
<p>Despite the succession of large breaches, industry‑wide losses from hacks and exploits actually fell into year‑end. Blockchain analytics firm PeckShield reported that total losses across the crypto sector dropped to about 76 million dollars in December, down sharply from roughly 194 million in November.​</p>
<p>Read more: <a href="https://crypto.news/trump-tariff-ruling-looms-as-200b-in-duties-4500-page-code-hang-in-balance/" rel="noopener noreferrer nofollow"> Trump tariff ruling looms as $200b in duties, 4,500-page code hang in balance </a></p>

Truebit exploit erases 99% of token value after 26 million dollar Ether theft

Table of Contents

crypto.news

Other articles published on Jan 9, 2026

Join our free newsletter for daily crypto updates!