Trust Wallet has confirmed a security incident involving version 2.68 of its browser extension, following reports of unauthorized fund losses. The company stated that the issue was limited to this specific version and did not affect its mobile applications or other platforms.

Blockchain investigator ZachXBT estimated that user losses totaled approximately $7 million. The incident gained attention after several users reported missing funds shortly after interacting with the affected extension version.

Investigation Ongoing as Thousands of Wallets Identified

On December 28, Trust Wallet CEO Eowyn Chen said the company was still investigating the incident and working to verify affected users. According to Chen, the team has identified 2,596 wallet addresses connected to the issue so far, while roughly 5,000 refund requests have been submitted.

Chen noted that a significant number of submitted claims were either duplicates or potentially fraudulent. To address this, Trust Wallet is cross-referencing multiple data sources to confirm legitimate cases before issuing compensation.

Preliminary findings suggest the incident may have involved malicious interactions or unauthorized access linked specifically to the browser extension environment, rather than a direct breach of Trust Wallet’s core systems. Browser-based wallets are generally more exposed to phishing attempts, malicious scripts, and compromised extensions, which can lead to private key or signing vulnerabilities if users unknowingly approve harmful transactions.

Trust Wallet emphasized that the exploit did not stem from its mobile applications and reiterated that the issue was isolated. The company said resolving verified claims and publishing a full technical breakdown of what occurred remain top priorities as the investigation continues.