Are victims from Trust Wallet browser extension v2.68 currently being drained?

[Ashawowo(OS)]

I just read from X

Trust Wallet v2.68 victims are being drained right now.

11 months after the December 2025 supply-chain attack, a gas bot is actively sweeping compromised wallets the moment they show activity.

https://x.com/sprunky_eth/status/2117592785196818892

Drain examples
Victim address
https://etherscan.io/address/0x3D66eCD370aadbf1450e4bff2F66264e60e33f13

Swept to
https://etherscan.io/address/0x0029fb8AB2FC82E9Fc9A6A708ddB3A08a740086e

https://x.com/sprunky_eth/status/2117592886355148863

Another case
https://x.com/noirvox_studio/status/2117644864766812207

INFRASTRUCTURE
Gas bot: https://etherscan.io/address/0xDbcC8d4b11A5852fd004Aef24bbE00B77a6D02d3
The bot sends tiny gas top-ups (≈0.00008–0.00009 ETH) before sweeping.
https://x.com/sprunky_eth/status/2117592935692636294

[ryzaadit]

Sound like a scam account.

I checked your tweets, and the account comment is sharing a claim fund for the victim. Have you seen or checked the official page on Trust Wallet? there is no single information or update regarding drained or a claim fund from the last 24h like tweets in X official account Trust Wallet.



I must say, this account is shady. Be aware! I could be a wrong, maybe someone can find some resource to claim the backup especially with Trust Wallet resource.

[Emjay24]

I checked your tweets, and the account comment is sharing a claim fund for the victim.

Trust Wallet agreed to refund anyone impacted by the browser extension drain, but the big question is the possibility that the recent drain is connected to the last year exploit

I must say, this account is shady. Be aware! I could be a wrong, maybe someone can find some resource to claim the backup especially with Trust Wallet resource.

This is the tweet of the person I believe was drained and he's tagged trust wallet X accounts, but still no response
https://x.com/Katherine_XBT/status/2117509224372576263

Also he's been contacted by the social Lead at trust wallet
https://x.com/J2Trappy_/status/2117527506433831365

Let's watch how it unfolds..

BTW I don't know how people still managed to use Trust wallet with all their incompetence, seems people never learn. I'll never advise anyone to use Trust wallet, there are better open source options.

[Yamane_Keto]

I just read from X

Trust Wallet v2.68 victims are being drained right now.

11 months after the December 2025 supply-chain attack, a gas bot is actively sweeping compromised wallets the moment they show activity.

https://x.com/sprunky_eth/status/2117592785196818892

Is it part 2520 of the wallet where the hacker leaked wallet seeds and private keys to a server controlled by the attacker?

BTW I don't know how people still managed to use Trust wallet with all their incompetence, seems people never learn. I'll never advise anyone to use Trust wallet, there are better open source options.

These wallets might be sold to users because they contain tokens and NFTs, and when users deposit gas fees, sweeper bots withdraw the funds to the hackers' wallets.

[TastyChillySauce00]

The first time anyone see a wallet that is said to be self custody got drained, you should immediately ditch it. I don't understand why people are still using Trustwallet after past trust wallet compromise because other better wallets exist with better UI and UX.

Use wallet that gives you capability to manage approval and revocation, clear signing, and truly self custody which means your seed phrase and private key never leave your machine.

[blek5000]

I wouldn't trust that thread's claims at face value, mainly because the evidence is all secondhand posts from X. Drain transactions on Etherscan prove that some wallets got swept, but they don't prove the cause is Trust Wallet v2.68 specifically. Plenty of drainers target leaked seed phrases or malicious approvals, and people often blame the wallet they happen to use. The December 2025 incident was real, so anyone who had that extension version installed back then should assume the keys may be exposed.

My advice would be to create a brand new wallet from a fresh seed on a clean device, then move funds out. Do this before anything else, because a sweeper bot reacts the moment a compromised address gets gas. Don't reuse the old seed even if it looks quiet right now. Also be wary of any 'claim fund' or compensation link in replies, since those are usually a second scam aimed at the same victims. Checking Trust Wallet's official announcements directly is the only reliable way to confirm the details.

[Wiwo]

Binance affiliates wallet hit again.

Funds are always safu, but the situation is becoming scary day by day; new cryptocurrency platforms keep getting drained with almost the same pattern of hack operations.

This stage of the market is going to shape slot of things as regards to wallet providers security and the rest of the loopholes hackers exploit.

[Odogwu-Blockchain]

There is no Trust wallet hacks or anything related uses getting scammed.

What had happened on trust wallet was a compromises that wasn't successful as of what happen around January this year to users using browser extensions. I created a topic concerning that, you could go through if you want. Trust wallet instructed users to create new wallet and move funds to new wallet.

[boyptc]

The first time anyone see a wallet that is said to be self custody got drained, you should immediately ditch it. I don't understand why people are still using Trustwallet after past trust wallet compromise because other better wallets exist with better UI and UX.

Use wallet that gives you capability to manage approval and revocation, clear signing, and truly self custody which means your seed phrase and private key never leave your machine.

They like its multiple support of cryptocurrency and the name associated with binance. I agree that people should stop using upon learning that a wallet has been compromised before.

It's easier when they're these web/browser extension wallets because users who are not in depth technicality about the security will just sign what it will show there.

There is no Trust wallet hacks or anything related uses getting scammed.

Trust wallet's X's account gave a warning about impersonators. So, with these hacks, the scammers also sees opportunity and users have to be careful of it if they were a direct victim.

[ryzaadit]

There is no Trust wallet hacks or anything related uses getting scammed.

Cause these is a drain issue from December. And these account are mostly just make a post for like Speculation a drained from browser extension v2.68 on December 2025 are still out there.

Trust Wallet agreed to refund anyone impacted by the browser extension drain, but the big question is the possibility that the recent drain is connected to the last year exploit

Thanks, I thought it was like a scam attempt.

It's quite rare; some projects are willing to make a refund for everyone who are impacted with such these case. Usually, they're just blindly and asking everyone to update their apps or extension without giving a refund/claim.

I was to worried these could be a scam tactics.