Blockchain researcher ZachXBT reported on December 25 that many Trust Wallet users experienced unauthorized withdrawals of funds in the past few hours.
Affected users claim that assets were withdrawn from their wallet addresses without consent.
Serious security warning for Trust Wallet users
ZachXBT emphasizes that the exact cause of the issue remains unknown. However, the timing of the attacks raises concerns. Today's incidents occurred shortly after an update to the Trust Wallet extension for Chrome, which was released the day before.
ZachXBT has begun collecting wallet addresses associated with suspicious thefts and is asking victims to come forward during the ongoing investigation.
Trust Wallet has not yet released a detailed technical explanation. However, the situation rekindles interest in the security of browser wallets.
Chrome extensions operate with elevated permissions. Security experts have repeatedly warned that a single malicious update or infected dependency can expose users to serious risks.
In recent months, several serious threats related to wallet extensions have already emerged.
Meanwhile, security companies have discovered fake wallet extensions that intercepted seed phrases. As a result, this allowed attackers to fully reconstruct wallets and later drain funds.
In other cases, malicious 'helper' extensions modified transaction instructions and imperceptibly withdrew small amounts of crypto with each approved exchange operation.
Overall, cybersecurity specialists have described campaigns involving seemingly safe browser extensions that over time began injecting scripts, redirecting traffic, or stealing data.
Additionally, such possibilities, although not always strictly related to crypto, can be used to attack wallet sessions, login processes, or transaction approvals.
In this context, reports about Trust Wallet evoke immediate concern in the crypto community. Importantly, users should now review recent transactions, revoke unnecessary permissions, and refrain from signing new transactions until the matter is clarified.
Moreover, individuals suspecting a compromise should transfer remaining funds to new wallets created with unique seed phrases.
By the time of publication, Trust Wallet has not yet confirmed whether the Chrome extension update is the direct cause of the issues.
To check out the latest cryptocurrency market analysis from BeInCrypto, click here.
