Wallet

On 25 December, blockchain investigator ZachXBT and other researchers raised security concerns about a recent Trust Wallet browser extension update. They allege that new code added on 24 December may exfiltrate seed phrases and wallet data to a spoofed domain, with users reporting rapid fund drains exceeding $2 million. The reports suggest a potential supply-chain compromise limited to the browser extension, while Trust Wallet has not yet issued any public response.

Changpeng Zhao has called for coordinated industry measures to combat address poisoning scams after a trader lost about $50 million in USDT in a single phishing incident. He is pushing for wallet-level spam filters, blacklists, and warnings, as security firms highlight rising dusting attacks and broader crypto fraud losses running into tens of billions of dollars.

A Bitcoin wallet dormant for eight years moved 400 BTC worth around $34.92 million to OKX, realizing an estimated $30.4 million profit. On chain records indicate the wallet previously received two 200 BTC deposits from HTX and executed the transfer roughly 11 hours before it was noted publicly, amid rising whale activity.

CryptoDnes reports that Bitcoin Hyper's presale has raised $29.7 million and is about $300,000 from the $30 million threshold in December 2025. The token is priced at $0.013475, with a stated 39% APY and over 1.3 billion HYPER committed to staking. Purchases are available via the project's official site and the Best Wallet app.

Binance co-founder Changpeng Zhao outlined new wallet security proposals after an investor lost $50 million in USDT to an address poisoning scam in December 2024. He suggested blacklist checks, warning prompts and filtering of low-value transactions to block "poison" addresses and reduce phishing risks for blockchain users.

On December 25, 2025, Charles Hoskinson said Bitcoin and Cardano would not be affected by address-poisoning scams under a UTXO model. His remark followed an incident in which a single user lost almost $50 million in USDT after copying a lookalike address from transaction history on an account-based blockchain.

Former Binance CEO Changpeng Zhao is calling for wallets to automatically block known poison addresses after a trader lost nearly $50 million in USDT in an address poisoning scam on December 20. He says wallet-level checks, shared blacklists and filtering spam micro‑transactions could eliminate this attack vector entirely.

Polymarket said in a Tuesday Discord post it identified and fixed a security issue affecting a small number of accounts, attributing it to a vulnerability in a third-party authentication provider. Users on Reddit and X reported drained balances and repeated login attempts, while the company said ongoing risk was mitigated and it will contact those impacted.

On December 24, ICBC's Singapore branch piloted overseas e-CNY wallet top-ups for Singapore residents under PBOC and MAS guidance. MAS indicated a phased e-CNY payment service by 2025, aimed at easing cross-border spending in China and strengthening financial links between Singapore and China.

Binance will pause Ethereum network deposits and withdrawals on December 25 for scheduled wallet maintenance. The notice lists a start at 13:55 (UTC+8) and 14:00 (UTC+8), with an expected one-hour suspension; trading will remain unaffected. Users should plan ETH transfers around the maintenance window.