Concern is growing within the crypto community around Trust Wallet: users of the Google Chrome browser extension are reporting mass losses of funds immediately after unlocking their wallets. According to the nature of the incident, the withdrawals occur without any visible actions on the part of the owners—simply opening the extension and entering the password appears to be sufficient. Initial damage estimates pointed to around $2.4 million, but according to on-chain investigator ZachXBT, actual losses have already exceeded $6 million and continue to rise as more affected addresses are identified.
The issue specifically concerns the Trust Wallet version distributed as a Chrome extension; mobile applications, according to current information, have not been affected. On-chain data indicates rapid and automated fund withdrawals shortly after wallet unlocks, reinforcing suspicions of a compromise either within the extension itself or along its update distribution chain. At the time the first reports emerged, Trust Wallet’s official account remained silent, further fueling anxiety and uncertainty in the market.
The situation appears particularly sensitive against the backdrop of the broader trend toward self-custody and a move away from centralized platforms. The incident once again demonstrates that the weakest link may not be the blockchain or a smart contract, but rather the user interface through which assets are accessed—in this case, a browser extension. If the scale of the attack is confirmed, this could become one of the largest incidents specifically involving wallet extensions rather than DeFi protocols.
An official statement from the Trust Wallet team is expected, including technical details and user recommendations. Until then, one conclusion is increasingly echoed across the crypto community: the browser remains the most vulnerable element in the architecture of personal crypto security.
Official project website: trustwallet.com
