Trust Wallet users suffered losses exceeding $7 million following a security breach linked to a compromised update of the wallet’s Chrome browser extension, raising renewed concerns over self custody risks. The incident occurred shortly after an update was released, with affected users reporting unauthorized transfers from their wallets. The issue was traced to a specific version of the extension, prompting warnings for users to avoid opening it and to install a newer release. Trust Wallet, which is owned by Binance, confirmed the breach and moved to reassure users that only the affected browser version was impacted, while mobile users and other extensions remained unaffected. The event has added to broader scrutiny around browser based crypto tools, which have become increasingly popular as access points to decentralized finance and onchain applications.
The breach was first flagged by onchain investigator ZachXBT, whose alert drew attention to a sudden cluster of wallet drains following the update. Soon after, Changpeng Zhao said the affected users would be reimbursed, signaling an effort to contain fallout from the incident. Crypto wallets hold private keys that authorize transactions, making them high value targets for attackers when vulnerabilities emerge. The Trust Wallet team advised users to immediately upgrade to the patched version and avoid interacting with the compromised release. The episode highlights how even brief exposure to flawed updates can result in significant losses, particularly during periods of heightened onchain activity when users may be less cautious.
The incident comes amid a broader rise in crypto related thefts this year, with security firms warning that personal wallet compromises are becoming more frequent. Data from Chainalysis shows billions of dollars lost to hacks and exploits in 2025, underscoring persistent weaknesses in user facing infrastructure. While centralized exchanges have invested heavily in security, self custody tools remain dependent on user vigilance and rapid response to updates. Market participants say the Trust Wallet breach reinforces the importance of extension security reviews and cautious update practices. As crypto adoption expands, similar incidents are likely to shape discussions around standards, audits, and accountability for wallet providers operating at scale.
