Trust Wallet Chrome Extension Compromised Leading to Multi-Million Dollar Cryptocurrency Theft

A compromised update to the Trust Wallet Chrome extension, version 2.68.0 released on December 24, resulted in the theft of over $7 million in cryptocurrency from hundreds of users. Attackers injected malicious JavaScript code, disguised as analytics, which activated when users imported their seed phrases, exfiltrating sensitive wallet data to a domain mimicking Trust Wallet's infrastructure. The attack was first flagged by blockchain investigators and security researchers, who noted that only desktop extension users were affected, while the mobile app remained secure. Trust Wallet responded by releasing an urgent warning and a subsequent extension update, while security firms highlighted the likely supply-chain nature of the compromise.

In parallel to the direct compromise, threat actors launched phishing campaigns using domains such as fix-trustwallet.com, luring affected users with promises of a vulnerability fix but instead further draining their wallets. The incident underscores the risks of supply-chain attacks on browser extensions and the sophistication of attackers, who combined technical compromise with social engineering to maximize their haul. Security analysts and blockchain investigators continue to monitor the situation, advising users to avoid the Chrome extension until further notice and to remain vigilant against related phishing attempts.