Trust Wallet browser extension bug in version 2.68 drains about $6.77M before December 26 2025 fix

Trust Wallet disclosed a security incident affecting only its browser extension version 2.68, which began draining hundreds of user wallets after an update on December 24 2025. On-chain researcher ZachXBT tracked the exploit, estimating around $6.77M in crypto was taken, with about $2.35M still held in attacker-linked addresses, while users were told to disable 2.68 and move to version 2.69. Trust Wallet and Binance's former CEO said users would be compensated as investigations into the supply chain-style attack and malicious redirect continue.