What Happened in the Trust Wallet Hack?
What Went Wrong?
On Christmas Day in 2025, hackers broke into a computer update for Trust Wallet’s Google Chrome extension. They hid bad code inside version 2.68 of the extension. This bad code let them steal secret passwords (seed phrases) and take money out of people's accounts. People who only used the app on their phones were completely safe.
How Much Was Stolen?
- Total Money Stolen: Hackers took about $7 million from hundreds of users.
- Types of Crypto Taken: Bitcoin, Ethereum, and Solana.
- Losses Per Person: Some people lost $50,000, while others lost up to $3.5 million.
- Tracking the Thieves: Online investigators watched the stolen money as it moved toward crypto exchanges.
Fixing the Problem & Paying People Back
- Everyone Gets Paid Back: Changpeng Zhao (CZ), the owner of Binance and Trust Wallet, promised that Trust Wallet will pay back all the money that was stolen.
- A Safe Update: Trust Wallet put out a new update (version 2.69) that erased the hackers' bad code.
What Should Users Do Now?
- Delete Version 2.68: Remove the broken Chrome extension right away.
- Get the New Version: Only download the official version 2.69 update.
- Move Your Money: Assume your old secret password was seen by hackers. Make a brand-new wallet and move your money there.
This advice didn't age well...
Main Lesson: Keeping crypto in web browser apps can be risky. Experts say it is much safer to store large savings on offline physical hardware devices. Telll that to the people who lost bitcoin in the ColdCard Hack this month.
Posted Using INLEO
