A compromised update to the Trust Wallet Chrome extension has led to $7 million in losses. Binance co-founder Changpeng Zhao confirms victims will be reimbursed. Users urged to update to version 2.69 immediately.
December 26, 2025 — In a significant post-Christmas security breach, users of the popular self-custody app Trust Wallet have suffered losses totaling approximately $7 million. The theft has been linked to a compromised update of the wallet’s Google Chrome browser extension.
Changpeng Zhao, co-founder of Binance (the parent company of Trust Wallet), has moved quickly to address the crisis, publicly assuring victims that all stolen funds will be reimbursed.
The Incident: What Happened?
The breach was first flagged on December 25, 2025, by the prominent on-chain detective ZachXBT. In a Telegram alert to the community, ZachXBT noted a correlation between a recent software update and sudden fund drains:
“Community alert: A number of Trust Wallet users have reported that funds were drained from wallet addresses within the past couple hours. While the exact root cause has not been determined coincidentally the Trust Wallet Chrome extension pushed a new update yesterday.”
Following this report, the Trust Wallet team confirmed the vulnerability, identifying Version 2.68 of their Chrome extension as the compromised software.
Critical Security Advisory
The Trust Wallet team has issued an urgent advisory for all desktop users:
- Avoid Version 2.68: This version contains the exploit that allows malicious actors to transfer funds.
- Update Immediately: Users must upgrade to Version 2.69, which patches the security flaw.
- Mobile Users Safe: The team clarified that mobile-only users and those using other browser extension versions were not impacted by this specific breach.
Context: Rising Crypto Theft in 2025
This incident underscores the growing sophistication of attacks targeting individual crypto holders. According to a 2025 report by Chainalysis:
- Total Theft: Crypto theft rose to $6.75 billion this year.
- Volume of Attacks: The number of personal wallet compromises surged to 158,000, a significant jump from 64,000 the previous year.
- Changing Tactics: While the frequency of attacks on individuals has increased, the total value stolen from personal wallets dropped to 20% of all crypto crime (down from 44%), suggesting hackers are targeting a higher volume of smaller accounts.
Market Reaction
Despite the security news, the broader cryptocurrency market remains bullish as the year concludes. As of today:
- Bitcoin (BTC) is trading at $88,346 (+0.80%).
- Ethereum (ETH) is up to $2,949 (+0.92%).
- Solana (SOL) has gained 1.42%, trading at $123.65.
For affected Trust Wallet users, the promise of reimbursement from Binance provides a rare safety net in an industry often plagued by irreversible losses. Users are advised to verify their extension version immediately.