Wallet

Binance CEO Changpeng Zhao stated that user funds are "SAFU" after a Trust Wallet browser extension exploit enabled attackers to steal $7 million in crypto. The incident involved Version 2.68 of the desktop extension, and Trust Wallet has issued Version 2.69 to patch the vulnerability. On-chain data shows roughly $2.8 million remains in attacker addresses, while more than $4 million has been routed through centralized exchanges.

Trust Wallet reported a security issue affecting its browser extension v2.68 on December 25 and urged users to disable it and update to v2.69. Hundreds of accounts saw unauthorized outflows totaling over $6 million across SOL, BTC, and EVM tokens. Funds moved through multiple addresses, while mobile-only users were not affected.

A vulnerability in Trust Wallet's browser extension version 2.68 led to nearly $6 million in crypto losses across Bitcoin, Ethereum, and Solana on December 24–25, 2025. Trust Wallet has confirmed the issue, urged users to stop using v2.68, and instructed them to upgrade to version 2.69 while its team investigates and contacts affected users.

On 25 December, blockchain investigator ZachXBT and other researchers raised security concerns about a recent Trust Wallet browser extension update. They allege that new code added on 24 December may exfiltrate seed phrases and wallet data to a spoofed domain, with users reporting rapid fund drains exceeding $2 million. The reports suggest a potential supply-chain compromise limited to the browser extension, while Trust Wallet has not yet issued any public response.

Changpeng Zhao has called for coordinated industry measures to combat address poisoning scams after a trader lost about $50 million in USDT in a single phishing incident. He is pushing for wallet-level spam filters, blacklists, and warnings, as security firms highlight rising dusting attacks and broader crypto fraud losses running into tens of billions of dollars.

A Bitcoin wallet dormant for eight years moved 400 BTC worth around $34.92 million to OKX, realizing an estimated $30.4 million profit. On chain records indicate the wallet previously received two 200 BTC deposits from HTX and executed the transfer roughly 11 hours before it was noted publicly, amid rising whale activity.

CryptoDnes reports that Bitcoin Hyper's presale has raised $29.7 million and is about $300,000 from the $30 million threshold in December 2025. The token is priced at $0.013475, with a stated 39% APY and over 1.3 billion HYPER committed to staking. Purchases are available via the project's official site and the Best Wallet app.

Binance co-founder Changpeng Zhao outlined new wallet security proposals after an investor lost $50 million in USDT to an address poisoning scam in December 2024. He suggested blacklist checks, warning prompts and filtering of low-value transactions to block "poison" addresses and reduce phishing risks for blockchain users.

On December 25, 2025, Charles Hoskinson said Bitcoin and Cardano would not be affected by address-poisoning scams under a UTXO model. His remark followed an incident in which a single user lost almost $50 million in USDT after copying a lookalike address from transaction history on an account-based blockchain.

Former Binance CEO Changpeng Zhao is calling for wallets to automatically block known poison addresses after a trader lost nearly $50 million in USDT in an address poisoning scam on December 20. He says wallet-level checks, shared blacklists and filtering spam micro‑transactions could eliminate this attack vector entirely.