Trust Wallet said it will reimburse users for approximately $7 million lost in a Christmas Day exploit tied to a compromised browser extension. The incident affected desktop users running extension version 2.68, which the company has since urged users to replace with an updated release. Binance co-founder Changpeng Zhao confirmed the losses would be fully covered.
Cybersecurity firm SlowMist said the exploit appeared to have been planned weeks in advance and involved the insertion of backdoor code capable of exporting users’ personal information. Investigators noted that the attacker demonstrated deep familiarity with the extension’s source code, raising concerns about potential insider involvement.
The incident highlights ongoing security challenges for self-custody wallets as adoption grows. Personal wallet compromises accounted for a significant share of crypto losses in 2025, underscoring institutional and regulatory focus on software supply chain risks and internal controls across the digital asset ecosystem.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
