Are victims from Trust Wallet browser extension v2.68 currently being drained?

[Ashawowo(OS)]

I just read from X

Trust Wallet v2.68 victims are being drained right now.

11 months after the December 2025 supply-chain attack, a gas bot is actively sweeping compromised wallets the moment they show activity.

https://x.com/sprunky_eth/status/2117592785196818892

Drain examples
Victim address
https://etherscan.io/address/0x3D66eCD370aadbf1450e4bff2F66264e60e33f13

Swept to
https://etherscan.io/address/0x0029fb8AB2FC82E9Fc9A6A708ddB3A08a740086e

https://x.com/sprunky_eth/status/2117592886355148863

Another case
https://x.com/noirvox_studio/status/2117644864766812207

INFRASTRUCTURE
Gas bot: https://etherscan.io/address/0xDbcC8d4b11A5852fd004Aef24bbE00B77a6D02d3
The bot sends tiny gas top-ups (≈0.00008–0.00009 ETH) before sweeping.
https://x.com/sprunky_eth/status/2117592935692636294

[ryzaadit]

Sound like a scam account.

I checked your tweets, and the account comment is sharing a claim fund for the victim. Have you seen or checked the official page on Trust Wallet? there is no single information or update regarding drained or a claim fund from the last 24h like tweets in X official account Trust Wallet.



I must say, this account is shady. Be aware! I could be a wrong, maybe someone can find some resource to claim the backup especially with Trust Wallet resource.

[Emjay24]

I checked your tweets, and the account comment is sharing a claim fund for the victim.

Trust Wallet agreed to refund anyone impacted by the browser extension drain, but the big question is the possibility that the recent drain is connected to the last year exploit

I must say, this account is shady. Be aware! I could be a wrong, maybe someone can find some resource to claim the backup especially with Trust Wallet resource.

This is the tweet of the person I believe was drained and he's tagged trust wallet X accounts, but still no response
https://x.com/Katherine_XBT/status/2117509224372576263

Also he's been contacted by the social Lead at trust wallet
https://x.com/J2Trappy_/status/2117527506433831365

Let's watch how it unfolds..

BTW I don't know how people still managed to use Trust wallet with all their incompetence, seems people never learn. I'll never advise anyone to use Trust wallet, there are better open source options.

[Yamane_Keto]

I just read from X

Trust Wallet v2.68 victims are being drained right now.

11 months after the December 2025 supply-chain attack, a gas bot is actively sweeping compromised wallets the moment they show activity.

https://x.com/sprunky_eth/status/2117592785196818892

Is it part 2520 of the wallet where the hacker leaked wallet seeds and private keys to a server controlled by the attacker?

BTW I don't know how people still managed to use Trust wallet with all their incompetence, seems people never learn. I'll never advise anyone to use Trust wallet, there are better open source options.

These wallets might be sold to users because they contain tokens and NFTs, and when users deposit gas fees, sweeper bots withdraw the funds to the hackers' wallets.

[TastyChillySauce00]

The first time anyone see a wallet that is said to be self custody got drained, you should immediately ditch it. I don't understand why people are still using Trustwallet after past trust wallet compromise because other better wallets exist with better UI and UX.

Use wallet that gives you capability to manage approval and revocation, clear signing, and truly self custody which means your seed phrase and private key never leave your machine.

[blek5000]

I wouldn't trust that thread's claims at face value, mainly because the evidence is all secondhand posts from X. Drain transactions on Etherscan prove that some wallets got swept, but they don't prove the cause is Trust Wallet v2.68 specifically. Plenty of drainers target leaked seed phrases or malicious approvals, and people often blame the wallet they happen to use. The December 2025 incident was real, so anyone who had that extension version installed back then should assume the keys may be exposed.

My advice would be to create a brand new wallet from a fresh seed on a clean device, then move funds out. Do this before anything else, because a sweeper bot reacts the moment a compromised address gets gas. Don't reuse the old seed even if it looks quiet right now. Also be wary of any 'claim fund' or compensation link in replies, since those are usually a second scam aimed at the same victims. Checking Trust Wallet's official announcements directly is the only reliable way to confirm the details.