TLDR
Losses were caused by a malicious update to the Trust Wallet browser extension, specifically version 2.68, that exfiltrated seed phrases and enabled fast wallet drains across multiple chains per a series of reports and advisories (crypto news coverage).
- Impact was limited to the browser extension v2.68; mobile and other versions were not affected (TradingView news).
- Estimated theft exceeded $67 million across BTC, ETH, SOL and EVM networks (CryptoPotato report).
- The team urged users to disable v2.68 and update to v2.69, and leadership signaled reimbursement for affected users (Finance Magnates coverage).
Deep Dive
1. Extension Version Issue
The immediate cause was a compromised browser extension build where a malicious script harvested wallet secrets during seed import. Multiple outlets detail a script in v2.68 that transmitted sensitive data externally, enabling attackers to restore wallets and sweep funds (CryptoSlate analysis).
Trust Wallet confirmed the scope and recommended updating to v2.69 while stressing that mobile users are unaffected (TradingView news).
Browser extensions carry higher attack surface. If you ever imported a seed into the affected version, treat that seed as compromised and migrate to a fresh one on a device you trust.
2. Scale and Assets Affected
Theft estimates landed between $67 million, with reports of drains across Bitcoin, Ethereum, Solana, and other EVM chains. Investigators and media aggregated victim reports and traced flows through multiple addresses and venues (CryptoPotato report, CoinSpeaker summary).
The attack pattern was fast and automated. Users saw immediate outflows after entering seed phrases in the compromised extension, consistent with coordinated exfiltration behavior (U.Today explainer).
3. Response and Reimbursement Signals
Trust Wallet advised disabling v2.68 and moving to v2.69. Coverage cites leadership assurances that affected users would be reimbursed, with process details to follow while the investigation continues (Finance Magnates coverage).
Researchers also warned of secondary scams that mimic fixes or support portals, urging users to rely on official channels and verified updates (CryptoSlate analysis).
If you depend on browser wallets, monitor official notices promptly and maintain a fallback plan (hardware or multisig) to reduce exposure during software incidents.
Conclusion
Todays Trust Wallet losses stem from a compromised browser extension update that exposed seed phrases and enabled rapid cross?chain drains. The scope appears confined to v2.68, with updates and reimbursement signals communicated via public channels. The broader takeaway is operational: browser wallet convenience comes with elevated risk, so layered security and fast response to official advisories are critical for capital protection.
Confidence: moderate because multiple reputable outlets corroborate scope and magnitude while formal root?cause publication is still in progress. Verify by checking the notice above and any subsequent official updates.
CoinsKid.Com