Trust Wallet Compensates Users After Security Breach

According to Odaily, a security breach occurred in the Trust Wallet Browser Extension v2.68 between December 24 and 26, 2025, due to an API key leak that led to the upload of malicious code. This incident affected 2,520 wallet addresses, resulting in the theft of approximately $8.5 million in assets. Investigations revealed a connection to the Sha1-Hulud supply chain attack in November, where attackers gained access to the Chrome Web Store API using leaked GitHub credentials. Trust Wallet has voluntarily decided to compensate affected users and is finalizing the compensation workflow and ownership verification process. The company has begun reaching out to victims who have contacted them officially. Trust Wallet advises affected users to transfer their funds to new wallets immediately and submit claims through the official form. Over 5,000 claims have been received, and the team is reviewing each case individually. Additionally, Trust Wallet has released a fixed version 2.69 and disabled the relevant publishing permissions and credentials.