Trust Wallet Issues Urgent Security Alert After Browser Extension Hack — Millions Lost

Trust Wallet has confirmed a serious security incident affecting its browser extension (version 2.68), prompting an official warning and urgent action for users after more than $6 million in crypto was reportedly drained from wallets connected to the affected extension.

According to reports and on-chain analysis, the exploit appears tied to the browser extension version 2.68, with attackers siphoning funds from hundreds of user wallets across BTC, SOL and EVM-compatible tokens shortly after installation or seed phrase import. Victims noticed unauthorized outflows and rapid balance drains, suggesting the compromised code may have been introduced via a recent update.

In its official security alert, Trust Wallet advised all users running version 2.68 to disable the extension immediately and upgrade to version 2.69 via the official Chrome Web Store. The company also stressed that mobile app users and other extension versions are not affected.

Key Takeaways:

The vulnerability affects only browser extension version 2.68 — upgrade to v2.69 now.

Reported losses have exceeded $6 million, with funds traced to multiple centralized exchange addresses.

Users who imported seed phrases into the compromised extension should move remaining funds to a secure wallet immediately and avoid re-using the affected extension until updated.

This incident highlights the risk of third-party wallet software and browser-based wallet vulnerabilities. Users should always verify extension updates and safeguard private keys offline.

Stay tuned for further updates as the investigation continues.