Trust Wallet Breach After Chrome Update: Over $7M In Crypto Stolen

, 28 December 2025

    Share:
Author: Insyirah Munawwar
More than $7 million (Rp 110 billion) was stolen from Trust Wallet users following an update to its Chrome browser extension, with Binance guaranteeing full compensation for victims. (Dok. Shutterstock)

Jakarta - The cryptocurrency community was rocked by a significant security incident involving Trust Wallet, a popular digital asset wallet owned by Binance. Users reported losing over $7 million, equivalent to approximately Rp 110 billion, shortly after installing a new update for the wallet's Google Chrome browser extension. The breach, which underscores persistent vulnerabilities in crypto infrastructure, prompted an immediate response from the highest levels of the industry.

The vulnerability was first brought to public attention by prominent on-chain researcher ZachXBT on December 25. He alerted his followers that multiple Trust Wallet users had seen their balances drained within just a few hours. In his statement, ZachXBT noted a strong coincidence: the malicious drainings occurred almost simultaneously with the release of an update for the Trust Wallet Chrome extension, though the exact cause was initially unconfirmed.

In response, the Trust Wallet team quickly investigated and confirmed a critical security flaw specifically in version 2.68 of its browser extension. Through its official X (formerly Twitter) account, the company urgently advised all users not to open the compromised version and to immediately update to the patched version 2.69. The team clarified that mobile app users and those on other browser extension versions were not affected by this exploit.

Read: Realme C85 5G Launches In Indonesia: Rugged Smartphone With IP69 Pro Rating

The stakes in such a breach are exceptionally high, as crypto wallets like Trust Wallet store the private keys that grant exclusive access to a user's digital assets. If malicious actors obtain these keys, they can irrevocably transfer funds out of the wallet without the owner's consent, which is precisely what transpired in this incident. This event highlights the catastrophic risk when a trusted piece of software is compromised.

Providing major relief to affected users, Changpeng Zhao (CZ), the founder and former CEO of Binance, made a definitive pledge. He publicly stated that all user funds lost in the breach would be fully reimbursed. This guarantee from one of the most influential figures in cryptocurrency helped to stabilize community trust and set a benchmark for corporate accountability in the face of security failures.

This incident occurs against a worrying backdrop of increasing crypto theft. According to a recent Chainalysis report, the total value of stolen cryptocurrency assets has surged to $6.75 billion this year. Notably, the number of compromised private wallets has skyrocketed to 158,000 cases, a dramatic increase from 64,000 in the previous year, indicating a troubling trend in targeted attacks.

Despite the rising number of incidents, the proportion of total crypto theft stemming from private wallet breaches like this one has actually decreased. Chainalysis data shows these breaches now account for about 20% of all stolen crypto, down from 44% the year before, suggesting that while attacks are more frequent, larger exchange-based heists continue to dominate total value stolen.

The Trust Wallet breach serves as a stark reminder of the security risks inherent to browser-based crypto tools, especially around software updates. Security experts consistently advise users to remain vigilant, ensure they are running the latest software versions from official sources, and monitor their wallets for any unauthorized transactions to better protect their digital assets.

(Insyirah Munawwar)

    Share:
komentar