Trust Wallet Warns Chrome Users of Key Harvesting Issue
NewsTrust Wallet issues emergency warning after malicious script in browser extension endangers private keys. $7 million loss expected.
- Trust Wallet’s Chrome extension security breach risks private keys.
- Malicious version bypassed manual release checks.
- Users face potential $7 million crypto losses.
Trust Wallet identified a malicious script in a Chrome extension update on December 24, 2025, which compromised user private keys, resulting in approximately $7 million losses.
The incident raised significant security concerns, focusing on potential insider exploitation and highlighted vulnerabilities in software release processes, affecting Trust Wallet Chrome users globally.
Breach and Impact
Trust Wallet recently issued an emergency warning for its users after identifying a security flaw in the Chrome extension. The issue involved a malicious script that harvested private keys, posing a threat to user assets.
Eowyn Chen, CEO of Trust Wallet, confirmed a breach resulting from a compromised Chrome API key, bypassing standard release procedures. The malicious version, 2.68, went live without official approval, affecting users who logged in pre-December 26.
The malicious extension v2.68 was NOT released through our internal manual process. Our current findings suggest it was most likely published externally through the Chrome Web Store API key, bypassing our standard release checks. — Eowyn Chen, CEO, Trust Wallet
The breach has led to approximately $7 million in losses, impacting crypto users globally. Three hundred Trust Wallet users entered their seed phrases during the affected period, exposing assets across multiple blockchain networks.
Despite these losses, Trust Wallet pledged to refund affected users while warning against scams exploiting this security breach. Instructions will be provided via their official channels, emphasizing caution among the user community.
Industry Implications
Trust Wallet’s incident underscores broader risks in extension security, joining a lineup of industry challenges in 2025. While no specific government actions have been documented, user vigilance is urged amid this breach.
Industry experts anticipate tighter security measures and potential regulatory scrutiny following this incident. The breach serves as a reminder of the importance of cybersecurity, with 713 million reported in similar losses in 2025 due to compromised browser extensions.
More From Crypto News
Aster (ASTER) Rises 4.88% in 24 Hours: What the Data Shows
Aster (ASTER) is trading at $0.655837, up 4.88% over the past 24 hours, according to CoinGecko data as of 19:13 UTC on November 11, 2026.
Bitcoin Misses Stock Rebound as ETF Outflows Hit Day Four
Bitcoin failed to follow a broad equity rebound on November 11, trading near $73,993 while Nasdaq-100 futures climbed 1.7% after CoreWeave posted an earnings be...
OCC Clears Coinbase National Trust Company for Crypto Custody
The OCC issued its decision in CD-1370 , formally authorizing Coinbase National Trust Company to operate as a federally chartered trust bank focused on digital-...
Reported Ankr Ethereum Bridge Drain Exceeds $303,000, The Defiant Says
The Ankr Ethereum Bridge was drained of more than $303,000 in an exploit carried out across five transactions.
Binance CFO Steps Down After Reported Hack, Co-CEO Cites Planned Transition
Binance’s chief financial officer has stepped down, the exchange confirmed, with the departure landing nine days after the platform suffered what has been descr...
US Treasury Takes Action Against MEXC Over Alleged $16B in Sanctions-Linked Transactions
The Treasury press release identifies MEXC as the subject of the action and ties the exchange to transaction flows connected to three sanctioned or adversarial...
