Are victims from Trust Wallet browser extension v2.68 currently being drained?

[Ashawowo(OS)]

I just read from X

Trust Wallet v2.68 victims are being drained right now.

11 months after the December 2025 supply-chain attack, a gas bot is actively sweeping compromised wallets the moment they show activity.

https://x.com/sprunky_eth/status/2117592785196818892

Drain examples
Victim address
https://etherscan.io/address/0x3D66eCD370aadbf1450e4bff2F66264e60e33f13

Swept to
https://etherscan.io/address/0x0029fb8AB2FC82E9Fc9A6A708ddB3A08a740086e

https://x.com/sprunky_eth/status/2117592886355148863

Another case
https://x.com/noirvox_studio/status/2117644864766812207

INFRASTRUCTURE
Gas bot: https://etherscan.io/address/0xDbcC8d4b11A5852fd004Aef24bbE00B77a6D02d3
The bot sends tiny gas top-ups (≈0.00008–0.00009 ETH) before sweeping.
https://x.com/sprunky_eth/status/2117592935692636294

[ryzaadit]

Sound like a scam account.

I checked your tweets, and the account comment is sharing a claim fund for the victim. Have you seen or checked the official page on Trust Wallet? there is no single information or update regarding drained or a claim fund from the last 24h like tweets in X official account Trust Wallet.



I must say, this account is shady. Be aware! I could be a wrong, maybe someone can find some resource to claim the backup especially with Trust Wallet resource.

[Emjay24]

I checked your tweets, and the account comment is sharing a claim fund for the victim.

Trust Wallet agreed to refund anyone impacted by the browser extension drain, but the big question is the possibility that the recent drain is connected to the last year exploit

I must say, this account is shady. Be aware! I could be a wrong, maybe someone can find some resource to claim the backup especially with Trust Wallet resource.

This is the tweet of the person I believe was drained and he's tagged trust wallet X accounts, but still no response
https://x.com/Katherine_XBT/status/2117509224372576263

Also he's been contacted by the social Lead at trust wallet
https://x.com/J2Trappy_/status/2117527506433831365

Let's watch how it unfolds..

BTW I don't know how people still managed to use Trust wallet with all their incompetence, seems people never learn. I'll never advise anyone to use Trust wallet, there are better open source options.

[Yamane_Keto]

I just read from X

Trust Wallet v2.68 victims are being drained right now.

11 months after the December 2025 supply-chain attack, a gas bot is actively sweeping compromised wallets the moment they show activity.

https://x.com/sprunky_eth/status/2117592785196818892

Is it part 2520 of the wallet where the hacker leaked wallet seeds and private keys to a server controlled by the attacker?

BTW I don't know how people still managed to use Trust wallet with all their incompetence, seems people never learn. I'll never advise anyone to use Trust wallet, there are better open source options.

These wallets might be sold to users because they contain tokens and NFTs, and when users deposit gas fees, sweeper bots withdraw the funds to the hackers' wallets.

[TastyChillySauce00]

The first time anyone see a wallet that is said to be self custody got drained, you should immediately ditch it. I don't understand why people are still using Trustwallet after past trust wallet compromise because other better wallets exist with better UI and UX.

Use wallet that gives you capability to manage approval and revocation, clear signing, and truly self custody which means your seed phrase and private key never leave your machine.

[blek5000]

I wouldn't trust that thread's claims at face value, mainly because the evidence is all secondhand posts from X. Drain transactions on Etherscan prove that some wallets got swept, but they don't prove the cause is Trust Wallet v2.68 specifically. Plenty of drainers target leaked seed phrases or malicious approvals, and people often blame the wallet they happen to use. The December 2025 incident was real, so anyone who had that extension version installed back then should assume the keys may be exposed.

My advice would be to create a brand new wallet from a fresh seed on a clean device, then move funds out. Do this before anything else, because a sweeper bot reacts the moment a compromised address gets gas. Don't reuse the old seed even if it looks quiet right now. Also be wary of any 'claim fund' or compensation link in replies, since those are usually a second scam aimed at the same victims. Checking Trust Wallet's official announcements directly is the only reliable way to confirm the details.

[Wiwo]

Binance affiliates wallet hit again.

Funds are always safu, but the situation is becoming scary day by day; new cryptocurrency platforms keep getting drained with almost the same pattern of hack operations.

This stage of the market is going to shape slot of things as regards to wallet providers security and the rest of the loopholes hackers exploit.

[Odogwu-Blockchain]

There is no Trust wallet hacks or anything related uses getting scammed.

What had happened on trust wallet was a compromises that wasn't successful as of what happen around January this year to users using browser extensions. I created a topic concerning that, you could go through if you want. Trust wallet instructed users to create new wallet and move funds to new wallet.

[boyptc]

The first time anyone see a wallet that is said to be self custody got drained, you should immediately ditch it. I don't understand why people are still using Trustwallet after past trust wallet compromise because other better wallets exist with better UI and UX.

Use wallet that gives you capability to manage approval and revocation, clear signing, and truly self custody which means your seed phrase and private key never leave your machine.

They like its multiple support of cryptocurrency and the name associated with binance. I agree that people should stop using upon learning that a wallet has been compromised before.

It's easier when they're these web/browser extension wallets because users who are not in depth technicality about the security will just sign what it will show there.

There is no Trust wallet hacks or anything related uses getting scammed.

Trust wallet's X's account gave a warning about impersonators. So, with these hacks, the scammers also sees opportunity and users have to be careful of it if they were a direct victim.

[ryzaadit]

There is no Trust wallet hacks or anything related uses getting scammed.

Cause these is a drain issue from December. And these account are mostly just make a post for like Speculation a drained from browser extension v2.68 on December 2025 are still out there.

Trust Wallet agreed to refund anyone impacted by the browser extension drain, but the big question is the possibility that the recent drain is connected to the last year exploit

Thanks, I thought it was like a scam attempt.

It's quite rare; some projects are willing to make a refund for everyone who are impacted with such these case. Usually, they're just blindly and asking everyone to update their apps or extension without giving a refund/claim.

I was to worried these could be a scam tactics.

[joniboini]

It's quite rare; some projects are willing to make a refund for everyone who are impacted with such these case. Usually, they're just blindly and asking everyone to update their apps or extension without giving a refund/claim.

If the damage is too big they probably won't bother with refunding anyone, especially if the brand is already quite strong. Not to mention most of these wallets or exchanges always have a disclaimer saying they are not responsible for user funds and whatnot. I can understand exchanges using refunding/recovering funds as an important strategy since it will damage their brand if they didn't, not so much for a wallet though.

[Conqueror777]

I checked your tweets, and the account comment is sharing a claim fund for the victim.

Trust Wallet agreed to refund anyone impacted by the browser extension drain, but the big question is the possibility that the recent drain is connected to the last year exploit

I must say, this account is shady. Be aware! I could be a wrong, maybe someone can find some resource to claim the backup especially with Trust Wallet resource.

This is the tweet of the person I believe was drained and he's tagged trust wallet X accounts, but still no response
https://x.com/Katherine_XBT/status/2117509224372576263

Also he's been contacted by the social Lead at trust wallet
https://x.com/J2Trappy_/status/2117527506433831365

Let's watch how it unfolds..

BTW I don't know how people still managed to use Trust wallet with all their incompetence, seems people never learn. I'll never advise anyone to use Trust wallet, there are better open source options.

I totally agree with you there are better opensource alternatives to this. Also not your keys not your crypto. If a wallet isn't opensource I'd doubt its credibility.

[MArsland]

I don't understand why people are still using Trustwallet after past trust wallet compromise because other better wallets exist with better UI and UX.

I still use it, no problem as long as it does not connect it to a specific site or protocol. The downside of Trustwallet was from the app being a little slow and heavy, however I was still able to import into another web3 wallet and also had no issues. The rife in x most TrustWallet Iphone users with iOS 18.5 specifications.

[Accardo]

There're rumors of a phishing attempt on trust wallet users which targeted IOS 18.5 users, and the claim is that $1.1 million has been drained from affected users, they're some users who claim their funds were lost. Not sure about these claims, since Trust wallet hasn't made anything official lately. But on CZ's page he made mention of trustwallet.cam a phishing site, trust wallet users should be careful about.

[asriloni]

There is no Trust wallet hacks or anything related uses getting scammed.

What had happened on trust wallet was a compromises that wasn't successful as of what happen around January this year to users using browser extensions. I created a topic concerning that, you could go through if you want. Trust wallet instructed users to create new wallet and move funds to new wallet.

I have to disagreed. It's more than user's fault. There have been so many reports by their users on reddit about their fund gone when they did nothing. I know it's non custodial wallet, but the amounts of hacked cases make no sense to gneralize it as user's fault.

https://www.reddit.com/r/CryptoScams/comments/1xkopi5/trust_wallet_was_hacked_today_and_drained_of/

https://www.reddit.com/r/trustwalletcommunity/comments/1xgyikp/did_my_trust_wallet_get_hacked/

https://www.reddit.com/r/CryptoScams/comments/1xdqo0n/stop_using_trust_wallet_immediately/

and many more.

It's not coincidence those people were also losing their money by the same thing. They literally did nothing, yet their money sent to the another address automatically. So i guess it's more than a phishing site. It sounds like someone from the team puts a loopholes in the wallet to access the sensitive data or something like that.

As far as i know the same case was also happening to the Bitget wallet users(formerly known as bitkeep), and you know what? someone was injected malware to the its app, then create a loophole to drain their users.

I remember my friends were also the victim of it. I guess there's a backdoor in trustwallet.