Trust wallet compromises

[FinneysTrueVision]

Even if you kept your seed phrase secure, Trust Wallet is still a hot wallet and vulnerable to the malware that was included in a recent update. You should move the funds out, and if possible buy a hardware wallet. The most affordable model of Trezor Safe is only one or two weeks worth of payments from signature campaigns.

[Rustam Meraj]

Trust wallet was compromised days ago if you followed news on social media and even in this forum, there are topics about this security accident of Trust wallet. The message is clear, but even you did not receive this message, you should be self aware of risk if you continue to use same Trust wallets created and used before the accident.

Create a new wallet and quickly move your fund to old wallets to new ones is a vital step to do.

Trust wallet got a serious accident in security, and I don't mind to use it after that. Even without this accident, you must know that Trust wallet is not a good one for using: it's close source that is never recommended for cryptocurrency users.

https://walletscrutiny.com/?platform=allPlatforms&page=0&query-string=Trust

Security warning on Trust Wallet is important message to remember saying of Don’t Trust, Verify, since closed source software means that community cannot check code to find any hidden weaknesses or mistakes in creation of your private keys.
As we know in late 2025 and early 2026, it was reported that huge hack of Trust Wallet Chrome extension occurred, costing users 8.5 million dollars, because of bad update, allowing attackers to steal recovery phrases.
In event that you have used wallet in security accident, you will need to move your money to new and trusted open source wallet such as BlueWallet for Bitcoin or Rabby for multi chain assets.
To be more secure, I would suggest hardware wallet such as Trezor to store your keys offline and you should always delete old possibly hacked app on your phone once you are sure your money is safe. Your wallet is front door to your bank, and you should not leave your life savings in lock that you cannot see how it is made.

[Husna QA]

-snip-
Bay the way the trustwallet official announced upgrade new version of trustwallet extension will still safe or not? the latest version of trustwallet extension already can't fix yet and they are recommending with new version have to use, have chance one day later the new version trustwallet extension get hack again?

I read this here: https://www.binance.com/en/square/post/01-02-2026-trust-wallet-relaunches-chrome-extension-and-updates-to-version-2-71-0-34545057002889,
Trust Wallet has released version 2.71 for its browser extension (the problematic version was v2.68). However, I’m not sure whether this latest version is actually more secure than the previous one.

So in the end, it really comes down to each user—whether they still want to continue using the updated version of Trust Wallet or switch to another wallet that is currently considered relatively safer.

In my opinion, whenever there’s an update, it’s better to wait for a while before deciding to use it, just to see whether the version is truly safe and whether there are any bug reports or, even worse, hacking incidents like what previously happened with Trust Wallet.


By the way, Electrum also experienced an exploit in one of its versions in the past*. However, it was quickly fixed by the developers, and this kind of response is what helps maintain user trust. After all, no wallet is 100% perfect.

*
https://www.bleepingcomputer.com/news/security/electrum-bitcoin-wallets-left-exposed-to-hacks-for-two-years/
https://github.com/spesmilo/electrum-docs/blob/master/cve.rst#id3

[Wiwo]

The trust wallet team confirmed the exploit of their site and moving of users assets to unknown address and by confirmation means the incident really have taken place and you need to act accordingly as you are advised.

But also for clarity trust wallet team also announced that everything is fine now and all stolen assets will be refunded by them to the customer affected.

What a bad way to start the year for trust wallet, and another bad side of using somewhat centralized wallets and extensions to store funds.

[Oshio-man]

Hey community,

I received this notification on my phone immediately I received my signature campaign payout. I don't want to get nervous since my seed phrase is intact and hasn't been given to anyone else.



Do anyone knows what this message means and what should I do if it actually true.

If this post is not in the right board, please do lmk. Thanks.

You are lucky that you received the message on time because some trust wallet users have lost their coins to scammers just because they did not receive the warning message on time from the trust wallet team, but trust wallet was among the solid and safe wallet crypto users feel like storing their coins but since they started giving their users some challenges, it has made some not to use trust wallet to hold huge amount of funds because they will not be comfortable with some kind bad news they will be hearing from trust wallet users, I make use of electrum for huge amount of coins and they are safe because the team behind electrum wallet Will not allow scammers to have way to their customers address than to make their privacy untouchable to scammers,.

[Zaguru12]

but trust wallet was among the solid and safe wallet crypto users feel like storing their coins but since they started giving their users some challenges, it has made some not to use trust wallet to hold huge amount of funds because they will not be comfortable with some kind bad news they will be hearing from trust wallet users, I make use of electrum for huge amount of coins and they are safe because the team behind electrum wallet Will not allow scammers to have way to their customers address than to make their privacy untouchable to scammers,.

First of all there have not been anytime that TrustWallet was actually a safe wallet because it’s a hot wallet even when it was self claiming to be open source. The only thing was that it was one of the most popular wallet then because it was a multi currency wallet and many newbies flooding into cryptocurrency opted for it then and that’s where it popularity grew, until people started realizing how it wasn’t a good wallet. But no hot wallet is actually safe.

Yes the electrum wallet is actually one of the most reputable wallet for anyone to use but it’s an hot wallet although can be used as a cold wallet when set up properly in an airgapped device but it is not utterly a safe wallet because of its reputation. The safety of every wallet depends on how you handle the wallet keys or seed phrases because even with loose backup you can actually lose your wallet to scammers not necessarily the team handling them out.

[Odogwu-Blockchain]

Thanks for your responses, I noticed I've imported my wallet to a metamask browser extension on my PC before where I connected my wallet to a DeFi platform on the Ethereum blockchain, this could be the reasons why I received this notification though.

The good news, nothing happens to my portfolio.

I haven't moved my portfolio yet to another wallet, but I'll definitely do that immediately. I really appreciate you all.

[Faisal2202]

Do anyone knows what this message means and what should I do if it actually true.

If this post is not in the right board, please do lmk. Thanks.

Are you aware of the recent $7 million hack of Trust wallet extension, if you are still using an older version then try to update or don't use an extension, try to use on smartphone (in app) as a matter of fact try to use electrum for bitcoin because using TW for now is a big risk if you think you can take that then that's your decision to make.

Now speaking about this notification, I am sure they are just letting you know about the situation, and want you to move the funds to another wallet if they are still in place and did'nt got hacked. Best to avoid TW for now.

Extra tip: If you will receive your signature payments in the tw the inputs will be increasing and you can't sum them up like you can do in electrum that's why you can save some in fee on electrum unlike on TW.

[SquirrelJulietGarden]

Security warning on Trust Wallet is important message to remember saying of Don’t Trust, Verify, since closed source software means that community cannot check code to find any hidden weaknesses or mistakes in creation of your private keys

When people already knew about non custodial wallets, and were ready to use it, they must know that if they don't use open source non custodial wallet, it's not better than using custodial wallets and centralized exchange accounts.

If they use close source open source wallets, like Trust wallet and any similar ones, in my opinion, it's better if they can simply use centralized exchange accounts and their custodial wallets. No source, no check, but centralized exchanges have their business and reputation to defend for their company income while there is less need like this with close source non custodial wallet companies.

[Yamane_Keto]

Do anyone knows what this message means and what should I do if it actually true.

It might be better to use the wallet via your phone, create a new wallet using any other wallet, and send the coins to that new wallet.
Browser extension wallets may not be secure at the moment.

Based on our investigation, this security incident affects:

Only Trust Wallet Browser Extension version 2.68 users who opened the extension and logged in during the affected period of December 24-26, 2025.

If you have received an app push via the Trust Wallet mobile app or you see a security incident banner on your Trust Wallet Browser Extension, you may still be using the compromised wallets.

Please note that it does NOT affect:

Any Trust Wallet mobile app users

Users on any other Browser Extension versions during the affected period

Browser Extension v2.68 users who opened and logged in after December 26, 2025 at 11:00 UTC.

Users who do not see the security incident banner on their Trust Wallet Browser Extension.

[Abu-Naim]

Hey community,

I received this notification on my phone immediately I received my signature campaign payout. I don't want to get nervous since my seed phrase is intact and hasn't been given to anyone else.



Do anyone knows what this message means and what should I do if it actually true.

If this post is not in the right board, please do lmk. Thanks.

To be safe, use BlueWallet, or electron wallet to receive your payments since they are all open-source wallets that’s are reputable, we can trust them a bit and save our funds with them and keep our seed phrase with us safe.

There has been some reports last two weeks ago that trust wallet extensions has been compromised, and I think their team in their official X handle promise to pay the losses, I don’t know if that has also affected mobile wallets which I have seen from comments here that only the extension wallets get problem; so the choice and the decision is yours. Are sticking to trust wallet or you will change to another one? Make sure you download anyone from their official website to avoid getting a clone wallet.

[The Cryptovator]

Action required; I am aware of this explosion. This is a serious issue for non-custodial wallet users, especially those who have been using the Trust Wallet extension. Normally I don't use an extension wallet to store my funds; I like to use software or apps for me. For your safety, you should follow the instructions given by the Trust Wallet, though you haven't lost anything. If you are a Trust Wallet extension user and haven't affected your wallet, then you are one of the luckiest people. Better create a new wallet seed and move your funds to either Trust or any other non-custodial wallet.

Though the Trust Wallet team offered compensation, we have to be careful for the future. I am wondering where we will go when a non-custodial wallet hacked, like before happens with the Electrum wallet and now happens with the Trust wallet. I don't see an alternative to using an open-source hardware wallet to secure our funds. This explosion forces me to think again about using a non-custodial wallet app or extension.

[Kavelj22]

Even if you kept your seed phrase secure, Trust Wallet is still a hot wallet and vulnerable to the malware that was included in a recent update. You should move the funds out, and if possible buy a hardware wallet. The most affordable model of Trezor Safe is only one or two weeks worth of payments from signature campaigns.

What shocks me several times is when see veteran members here in the forum suggest trustwallet as a reliable app in many occasions. This tells how reputed the wallet among different kinds of users at the point they suggest it to newbies.

Trustwallet is a custudial wallet with specific characteristics like any other custudial clients. I began to make sure that most of crypto uses aren't aware the risks associated with. And that compromises won't cease to happen with this huge number of users counted in millions.

[Obim34]

When people already knew about non custodial wallets, and were ready to use it, they must know that if they don't use open source non custodial wallet, it's not better than using custodial wallets and centralized exchange accounts.

When i joined the forum, i was making use of exchange wallets, I participated in my first signature campaign using an exchange wallet, I was ignorant with barely any knowledge on wallets and which to use, conversations here made me realize other preference, at the best of my inquiries there were lots of options besides Trust Wallet.

Extension wallets are used on web, much open to online threats, If i'm going to use hot wallets to hold my Bitcoin, its either my wallet is offline together with my keys or the Bitcoin in my wallet isn't much, large amounts should be strictly secured offline.

[Rgram]

OP, I have installed in my smartphone Trust Wallet's App to hold small amounts and I have not received any warning message nor I haven't lost funds either, now that I've just checked it, so chances are that the problem is only with the browser extension.

I can consent as well that I have not received any such information and I’ve got trust wallet. Don’t know if it’s peculiar to those using an online version of the wallet but, I prefer the app and if this message isn’t coming from the support or on the notification page of trust wallet, you could as well disregard as this could potentially mean your device has being compromised and they need you to take steps they could mirror and hack your wallet.

[avp2306]

When people already knew about non custodial wallets, and were ready to use it, they must know that if they don't use open source non custodial wallet, it's not better than using custodial wallets and centralized exchange accounts.

When i joined the forum, i was making use of exchange wallets, I participated in my first signature campaign using an exchange wallet, I was ignorant with barely any knowledge on wallets and which to use, conversations here made me realize other preference, at the best of my inquiries there were lots of options besides Trust Wallet.

Extension wallets are used on web, much open to online threats, If i'm going to use hot wallets to hold my Bitcoin, its either my wallet is offline together with my keys or the Bitcoin in my wallet isn't much, large amounts should be strictly secured offline.

I believe most of people start that way since exchange and chrome extension wallet is convenient option to use by anyone. The risky part is people usually hold all their funds in single wallet and when same troubles happen all their hard earned money got drained.

That's why with those situations happen its really better for people to learn that these type of wallet is not safe. So storing huge is not good and better have non custodial wallet for safety.

To many people got compromised on this recent hacking issue with Trust wallet and let see if the company owns it will really give a refund those users lose their funds from that incident.

[OcTradism]

I believe most of people start that way since exchange and chrome extension wallet is convenient option to use by anyone. The risky part is people usually hold all their funds in single wallet and when same troubles happen all their hard earned money got drained.

I think most people starts with centralized exchanges before they learn more about decentralized exchanges, peer to peer marketplaces and non-custodial wallets. Open-source is something they will learn later and along their time in this industry but it is important to have a good and secure wallet without dangerous backdoors to use.

Money should never be stored all in one wallet and this principle is applied for all things, not only with cryptocurrency fund.

That's why with those situations happen its really better for people to learn that these type of wallet is not safe. So storing huge is not good and better have non custodial wallet for safety.

To many people got compromised on this recent hacking issue with Trust wallet and let see if the company owns it will really give a refund those users lose their funds from that incident.

If they are careful, ready to learn, they can learn as there are many resources for learning, without fees.

Security and Privacy Encyclopedia.

[Karl_3000]

That's why with those situations happen its really better for people to learn that these type of wallet is not safe. So storing huge is not good and better have non custodial wallet for safety.

To many people got compromised on this recent hacking issue with Trust wallet and let see if the company owns it will really give a refund those users lose their funds from that incident.

Many people are only lucky on this forum, many people that are not on this forum will not know what open source or close source wallets are if they are not into computer science field.

Do you know that some people still do not know the difference between custodial and self-custody wallet? All they know are the centralized exchanges.

Knowledge is very important in life

[SilverCryptoBullet]

Many people are only lucky on this forum, many people that are not on this forum will not know what open source or close source wallets are if they are not into computer science field.

Do you know that some people still do not know the difference between custodial and self-custody wallet? All they know are the centralized exchanges.

Knowledge is very important in life

The forum is not the only place to learn about Bitcoin, Bitcoin wallets, and cryptocurrency wallets. You are too exaggerating the importance and role of Bitcoin forum in educating people about different wallet types.

How do people find this forum?
Mostly from the Internet, and the others are from their friends or someone else who introduced this forum to them.

If people can use the Internet, they are able to find more websites and resources to learn about Bitcoin, Bitcoin wallets, and other things.

[Lakai01]

Many people are only lucky on this forum, many people that are not on this forum will not know what open source or close source wallets are if they are not into computer science field.
[...]

That has nothing to do with luck. Knowledge is always an obligation to be acquired and never an obligation to be delivered.

When dealing with cryptos in general, you also have to deal with wallets and the different types of wallets very quickly—and their respective advantages and disadvantages. 99.9% of people simply choose the most convenient and cheapest option and install a browser wallet just to have a solution ready as quickly as possible. Even if you explained the most important differences between wallets to these people, they would still choose the easiest option for them.

However, if someone is active here in the forum, they usually already have more experience and know about such things in advance, but not because every piece of information is presented here on a silver platter, not at all.