Trust Wallet Users Shocked as Funds Drain After Extension Update

• XTrust Wallet confirms a security flaw in the browser extension version 2.68.
• Users report sudden wallet drains and are urged to update to version 2.69.

After updating their browser extension, several Trust Wallet users reported their funds were suddenly drained. The issue surfaced when ZachXBT highlighted a wave of user reports claiming their funds vanished right after installing the latest Chrome extension update. A simple update that should’ve been harmless instead exposed a weakness, leaving a number of users scrambling after their assets went missing.

Initial tracking of the theft addresses shows more than a hundred affected Trust Wallet users and over $6 million drained so far.

Trust Wallet Responds to Extension Flaw

Trust Wallet, through its official X account, admitted that something was wrong with the 2.68 browser extension. They stressed that the issue existed only in that particular release, noting that the mobile app and other extension versions were untouched. However, this relief did not completely reassure users, as some funds had already been lost.

Furthermore, they released version 2.69 as an emergency update and urged users to upgrade immediately to avoid further risk.

While the exact cause is still under investigation, analysts have discovered suspicious code in the JavaScript file of the extension version 2.68 that can be activated when users enter a seed phrase.

Not only that, but there were also indications that the extension had contacted a newly created external domain, further fueling speculation of suspicious activity. At this point, they urged users who had imported seed phrases to that version to immediately move their assets to a new wallet.

On the other hand, this incident is ironic given that Trust Wallet has been actively introducing innovations to make things easier for users in recent times. In mid-December, we reported that Trust Wallet introduced support for gas sponsorship on Ethereum, allowing users to perform swaps without having to hold ETH.

Then, on December 12, we also covered a partnership between Revolut and Trust Wallet that allows instant crypto purchases directly into the self-custody of users in the European Union.

Also, in early December, we highlighted the launch of Prediction Markets directly within the Trust Wallet app for sports, politics, and crypto, all of which run on-chain, allowing users to manage their positions without having to move assets out of their personal wallets.