Several Trust Wallet users reported unauthorized withdrawals from their wallets on Christmas Day, with funds drained within minutes.
One user claimed losses exceeding $300,000, stating the transactions occurred in a four-minute window, though blockchain investigator ZachXBT later flagged that account as suspicious.
Community reports indicate that multiple networks were affected, including Bitcoin, Solana, and EVM-compatible chains. The incident followed the installation of a newly released Trust Wallet browser extension updаte, which initially appeared legitimate.
However, attackers allegedly manipulated the extension’s code to extract users’ seed phrases, enabling immediate wallet draining upon import.
Trust Wallet confirmed the security breach on Thursday, estimating losses of more than $6 million. The company stated that the issue was limited to Browser Extension version 2.68 and urged users to disable it and upgrade to version 2.69.
ZachXBT reported that hundreds of users were impacted, with stolen funds spread across multiple wallets, according to Arkham data.
