Trust Wallet Launches Compensation Program Following Browser Extension Security Breach

A significant security vulnerability impacted Trust Wallet’s Browser Extension between late December 2025, resulting in substantial asset losses for affected users. The wallet service has announced it will compensate those harmed by the incident and is actively processing reimbursement claims.

The Breach: What Happened

From December 24-26, 2025, Trust Wallet’s v2.68 extension fell victim to malicious code injection through compromised API credentials. The attack exploited leaked GitHub authentication tokens that were previously exposed during the broader Sha1-Hulud supply chain assault occurring in November. Attackers leveraged these credentials to gain unauthorized access to the Chrome Web Store API, enabling them to inject harmful code into the extension.

Scale of the Impact

The security incident affected approximately 2,520 wallet addresses that actively used the extension during the compromised window. The unauthorized access resulted in roughly $8.5 million in stolen cryptocurrency and digital assets. This represents one of the more damaging wallet security events in recent months.

Trust Wallet’s Response and Compensation Initiative

Recognizing the severity of the situation, Trust Wallet announced it would compensate impacted users through a structured reimbursement program. The team is currently:

• Finalizing verification procedures to confirm ownership and validate claims
• Processing submitted reimbursement applications (over 5,000 have been received)
• Individually reviewing each case to ensure accurate compensation
• Reaching out to victims who have contacted support channels

Users experiencing losses are advised to immediately migrate their remaining funds to a secure new wallet and submit a formal claim through the official compensation form.

Additional Protective Measures

Trust Wallet has released patched version 2.69, which eliminates the vulnerability. The team has also revoked all associated API publishing permissions and invalidated the compromised credentials to prevent further unauthorized access.

The incident highlights ongoing risks within blockchain infrastructure’s supply chain, reminding users and projects alike of the importance of credential management and regular security audits.