Trust Wallet Chrome Extension Hack: Millions in Cryptocurrency Assets Stolen

In a worrying turn of events, several users of the popular Trust Wallet Chrome extension have reported losing millions of dollars worth of cryptocurrency assets due to a hack on December 24, 2025. This incident highlights the vulnerabilities that exist within the rapidly evolving world of cryptocurrencies and the need for greater security measures.

Compromised Extension Update and Exfiltration of Sensitive Data

The initial attack on the Trust Wallet Chrome extension involved a compromised update released on December 24. This update, version 2.68.0, contained hidden code that silently sent sensitive wallet data outside, according to security analyst Akinator. The data was exfiltrated to a domain named api.metrics-trustwallet[.com], which was registered only a few days prior to the incident.

Phishing Campaign and Wallet Drainage

As users scrambled for information and guidance, a parallel phishing campaign was observed by BleepingComputer. This campaign aimed to take advantage of the ongoing panic by directing concerned users to a suspicious website, fix-trustwallet[.com], which impersonated Trust Wallet branding and claimed to fix a "security vulnerability" in Trust Wallet. Users who entered their wallet recovery seed phrase on this site would allow attackers to drain all associated funds.

Implications for North East India and Beyond

The Trust Wallet hack serves as a stark reminder of the risks associated with cryptocurrency transactions. As more individuals and businesses in North East India and across India adopt cryptocurrencies, it is crucial to prioritize security measures to protect assets. The hack also underscores the importance of vigilance and critical thinking when interacting with online platforms, particularly during times of heightened anxiety.

Trust Wallet's Response and Future Remediation

Trust Wallet has confirmed the security incident and advised users to update to the latest version, 2.69, to resolve the issue. However, the company has yet to respond to questions regarding compensation for affected users or available remediation options. Users who believe their wallets may have been compromised are urged to immediately move remaining funds to a new wallet created with a fresh seed phrase and to treat any previously exposed recovery phrases as permanently unsafe.

Looking Forward: Building a Secure Cryptocurrency Ecosystem

The Trust Wallet hack underscores the need for a more secure cryptocurrency ecosystem. This requires a collaborative effort from users, developers, and regulatory bodies to implement robust security measures, educate users about best practices, and hold platforms accountable for their security practices. As cryptocurrencies continue to gain traction, it is essential to prioritize security to maintain user trust and foster widespread adoption.