Users of Trust Wallet, the Binance-owned cryptocurrency platform, lost over $7 million following a security incident linked to the release of the wallet’s Chrome extension version 2.68. The company’s co-founder, Changpeng Zhao, confirmed that all affected users will be reimbursed, and urged them to upgrade to the latest secure version, 2.69.
Trust Wallet posted on X (formerly Twitter) that the breach affected only Browser Extension 2.68, and advised users to disable it immediately and update to the new version. “We’ve confirmed that approximately $7M has been impacted and we will ensure all affected users are refunded,” the platform stated. Zhao added that the team is still investigating how hackers gained access to the extension.
Mobile-only users and those using other browser extension versions were not affected, according to Trust Wallet. The company has provided detailed instructions for users to secure their wallets, including disabling the vulnerable extension, enabling developer mode in Chrome, and updating to version 2.69. Users are advised not to open the compromised extension until the update is applied.
The breach sparked reactions on social media, with users expressing concern over the incident and demanding accountability. Questions were raised about how the vulnerability passed testing and what measures would be implemented to prevent similar issues in the future.
Trust Wallet, acquired by Binance in 2018, is a self-custody crypto wallet that allows users to buy, sell, store, swap, and manage cryptocurrencies, NFTs, and more. The wallet has been downloaded over 100 million times and supports more than 10 million crypto assets across over 100 blockchains.
