What initially appeared as isolated complaints quickly evolved into a broader on-chain pattern, pointing to a coordinated drain affecting users […] The post TrustWhat initially appeared as isolated complaints quickly evolved into a broader on-chain pattern, pointing to a coordinated drain affecting users […] The post Trust

Trust Wallet Users Report Fund Losses After Chrome Extension Update

2025/12/26 16:20

What initially appeared as isolated complaints quickly evolved into a broader on-chain pattern, pointing to a coordinated drain affecting users of Trust Wallet.

Key Takeaways
  • Trust Wallet users reported instant fund losses after importing seed phrases into the updated Chrome extension.
  • Wallets were drained rapidly across multiple assets with no staged withdrawals.
  • On-chain analysis points to a coordinated exploit affecting multiple wallets.
  • More than $4.3 million appears to have been siphoned based on public blockchain data. 

The first red flags appeared on social media, where users reported that balances vanished almost instantly after importing their seed phrases into the newly updated Chrome extension. In multiple cases, funds were gone before users could interact with their wallets, suggesting the compromise occurred at the moment of wallet restoration rather than through delayed access.

Affected assets were not limited to a single chain. Reports showed Bitcoin, Ethereum, and BNB being transferred out almost simultaneously, with no evidence of staggered withdrawals or manual interaction.

On-chain investigator flags coordinated activity

Blockchain analyst ZachXBT later highlighted the activity, noting that several unrelated wallets were drained in a remarkably similar fashion over a short window of time. The transactions clustered tightly around the rollout of version 2.68.0 of the Trust Wallet Chrome extension.

Rather than funneling funds into one destination, the attacker(s) dispersed assets across multiple receiving addresses. Despite this, the transaction flows shared nearly identical structures, indicating automation rather than user-side compromise.

Millions traced through public blockchain data

Using publicly visible blockchain records, analysts estimate that more than $4.3 million in crypto has already been siphoned from affected wallets. The estimate is conservative, reflecting only the addresses that have been publicly linked to user reports.

READ MORE:

Crypto Derivatives Trading Explodes to Nearly $86 Trillion in 2025

Blockchain intelligence tools such as Arkham have been used to trace the flows, revealing several addresses that repeatedly received funds from different victims. The consistency across these transactions has strengthened the case for a single exploit mechanism rather than multiple independent incidents.

Silence from the wallet provider

Despite the growing body of on-chain evidence, Trust Wallet has yet to release an official explanation. The company has not confirmed a vulnerability, nor has it publicly acknowledged a connection between the Chrome update and the reported losses.

No guidance has been issued on whether users should avoid the extension, revoke permissions, or migrate funds. Likewise, no recovery or mitigation steps have been outlined for affected users.

Focus remains on the extension update

At this stage, the investigation relies almost entirely on blockchain forensics and user timelines. The Chrome extension update released on December 24 remains the central reference point, though it has not been definitively identified as the root cause.

Until further clarification emerges, the incident underscores the risks tied to browser-based wallets and the sensitivity of seed phrase handling. For now, the situation remains unresolved, with investigators continuing to piece together events block by block rather than through official disclosures.

This content is for informational purposes only and does not constitute investment or security advice.


The information provided in this article is for educational purposes only and does not constitute financial, investment, or trading advice. Coindoo.com does not endorse or recommend any specific investment strategy or cryptocurrency. Always conduct your own research and consult with a licensed financial advisor before making any investment decisions.

The post Trust Wallet Users Report Fund Losses After Chrome Extension Update appeared first on Coindoo.

Market Opportunity
Intuition Logo
Intuition Price(TRUST)
$0.1103
$0.1103$0.1103
-7.77%
USD
Intuition (TRUST) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

Why 100 Percent Test Coverage is Not Possible — Lessons from Testing Banking and Healthcare Systems

Why 100 Percent Test Coverage is Not Possible — Lessons from Testing Banking and Healthcare Systems

Quality is not about testing everything; quality is about testing what is most important.
Share
Hackernoon2025/12/26 16:05
US eyes crypto mining at disputed nuclear plant in Russia-Ukraine conflict: report

US eyes crypto mining at disputed nuclear plant in Russia-Ukraine conflict: report

The plant is located in Ukraine and has been under Russian control since 2022, with its future management a key issue in peace talks.
Share
Coinstats2025/12/26 18:58
Google's AP2 protocol has been released. Does encrypted AI still have a chance?

Google's AP2 protocol has been released. Does encrypted AI still have a chance?

Following the MCP and A2A protocols, the AI Agent market has seen another blockbuster arrival: the Agent Payments Protocol (AP2), developed by Google. This will clearly further enhance AI Agents' autonomous multi-tasking capabilities, but the unfortunate reality is that it has little to do with web3AI. Let's take a closer look: What problem does AP2 solve? Simply put, the MCP protocol is like a universal hook, enabling AI agents to connect to various external tools and data sources; A2A is a team collaboration communication protocol that allows multiple AI agents to cooperate with each other to complete complex tasks; AP2 completes the last piece of the puzzle - payment capability. In other words, MCP opens up connectivity, A2A promotes collaboration efficiency, and AP2 achieves value exchange. The arrival of AP2 truly injects "soul" into the autonomous collaboration and task execution of Multi-Agents. Imagine AI Agents connecting Qunar, Meituan, and Didi to complete the booking of flights, hotels, and car rentals, but then getting stuck at the point of "self-payment." What's the point of all that multitasking? So, remember this: AP2 is an extension of MCP+A2A, solving the last mile problem of AI Agent automated execution. What are the technical highlights of AP2? The core innovation of AP2 is the Mandates mechanism, which is divided into real-time authorization mode and delegated authorization mode. Real-time authorization is easy to understand. The AI Agent finds the product and shows it to you. The operation can only be performed after the user signs. Delegated authorization requires the user to set rules in advance, such as only buying the iPhone 17 when the price drops to 5,000. The AI Agent monitors the trigger conditions and executes automatically. The implementation logic is cryptographically signed using Verifiable Credentials (VCs). Users can set complex commission conditions, including price ranges, time limits, and payment method priorities, forming a tamper-proof digital contract. Once signed, the AI Agent executes according to the conditions, with VCs ensuring auditability and security at every step. Of particular note is the "A2A x402" extension, a technical component developed by Google specifically for crypto payments, developed in collaboration with Coinbase and the Ethereum Foundation. This extension enables AI Agents to seamlessly process stablecoins, ETH, and other blockchain assets, supporting native payment scenarios within the Web3 ecosystem. What kind of imagination space can AP2 bring? After analyzing the technical principles, do you think that's it? Yes, in fact, the AP2 is boring when it is disassembled alone. Its real charm lies in connecting and opening up the "MCP+A2A+AP2" technology stack, completely opening up the complete link of AI Agent's autonomous analysis+execution+payment. From now on, AI Agents can open up many application scenarios. For example, AI Agents for stock investment and financial management can help us monitor the market 24/7 and conduct independent transactions. Enterprise procurement AI Agents can automatically replenish and renew without human intervention. AP2's complementary payment capabilities will further expand the penetration of the Agent-to-Agent economy into more scenarios. Google obviously understands that after the technical framework is established, the ecological implementation must be relied upon, so it has brought in more than 60 partners to develop it, almost covering the entire payment and business ecosystem. Interestingly, it also involves major Crypto players such as Ethereum, Coinbase, MetaMask, and Sui. Combined with the current trend of currency and stock integration, the imagination space has been doubled. Is web3 AI really dead? Not entirely. Google's AP2 looks complete, but it only achieves technical compatibility with Crypto payments. It can only be regarded as an extension of the traditional authorization framework and belongs to the category of automated execution. There is a "paradigm" difference between it and the autonomous asset management pursued by pure Crypto native solutions. The Crypto-native solutions under exploration are taking the "decentralized custody + on-chain verification" route, including AI Agent autonomous asset management, AI Agent autonomous transactions (DeFAI), AI Agent digital identity and on-chain reputation system (ERC-8004...), AI Agent on-chain governance DAO framework, AI Agent NPC and digital avatars, and many other interesting and fun directions. Ultimately, once users get used to AI Agent payments in traditional fields, their acceptance of AI Agents autonomously owning digital assets will also increase. And for those scenarios that AP2 cannot reach, such as anonymous transactions, censorship-resistant payments, and decentralized asset management, there will always be a time for crypto-native solutions to show their strength? The two are more likely to be complementary rather than competitive, but to be honest, the key technological advancements behind AI Agents currently all come from web2AI, and web3AI still needs to keep up the good work!
Share
PANews2025/09/18 07:00