A number of Trust Wallet users have reported that funds were abruptly drained from their wallet addresses in the past several hours, sparking fresh alarm in the cryptocurrency community about the security of browser-based wallets.
The incidents follow a recent update to the Trust Wallet Chrome extension, although the precise cause has not yet been confirmed by the wallet provider.
The situation first came to light on Thursday when blockchain investigator ZachXBT issued a public alert on Telegram, warning that multiple Trust Wallet users were experiencing unauthorized outflows of assets from their wallets.
According to on-chain data and community reports, the losses appear to be widespread, with some estimates suggesting that more than $6 million worth of cryptocurrency may have been stolen in the suspected security breach.
Trust Wallet has since confirmed a security incident affecting version 2.68 of its browser extension, urging users to disable that version immediately and upgrade to the latest release (version 2.69), which the company says addresses the issue. The provider noted that mobile app users and holders of other extension versions were not affected by the breach.
While the exact technical root cause remains under investigation, the timing of the unauthorized transfers, closely following the extension update, has raised serious concerns among users and security researchers about potential vulnerabilities in browser-based wallet tools.
Browser extensions can carry elevated risk due to their permissions and integration with desktop environments, and a compromised or malicious update could expose users’ private keys or signing capabilities.
Affected users are being advised to immediately review recent transactions, disable the compromised extension, and transfer remaining funds to new wallets with fresh seed phrases. The episode underscores ongoing security challenges in the crypto ecosystem, particularly for self-custody solutions that rely on web browser interfaces.
Trust Wallet says it is continuing to investigate, working to support impacted users and improve safeguards to prevent future incidents.