Zeros

Trust Wallet Chrome Extension Breach : $7 Million Stolen Trust Wallet users experienced a significant security incident on December 24, 2025, when attackers compromised version 2.68 of the Chrome browser extension . Approximately $7 million in digital assets were stolen from hundreds of wallets. This was a genuine theft, not a situation involving unpaid transaction fees. The breach occurred through a supply chain attack. Attackers obtained a leaked Chrome Web Store API key , which allowed them to publish a malicious version of the extension through official channels. The compromised update passed Google's review process and was distributed to users on December 24 at 12:32 p.m. UTC. The malicious code was concealed within the extension's JavaScript files, specifically disguised as routine analytics functionality. When users imported their recovery seed phrases into the affected extension, the code captured this sensitive information and transmitted it to attacker-c...