Trust Wallet warns users to update Chrome extension after $7M security loss

Trust Wallet has urged users to update its Chrome extension after a security incident that caused about $7 million in losses. The flaw affected version 2.68 of the multi‑chain, non‑custodial wallet, which is used by around one million users, and Trust Wallet says approximately $7 million has been impacted with refunds planned for affected users. It recommends upgrading to version 2.69 immediately to mitigate the issue.

Blockchain cybersecurity analysis from SlowMist suggested the attack may have been carried out by an APT group, with PeckShieldAlert reporting that over $6 million had been drained and most funds moved to exchanges, while about $2.8 million remained in attacker wallets. BleepingComputer reported that attackers also launched a parallel phishing campaign exploiting user panic, directing victims to a fake fix site that prompted seed phrase entry and enabled fund drains. Trust Wallet cautioned users to avoid messages outside its official channels as the investigation continues. According to BleepingComputer.