Trust Wallet Launches $7 Million Compensation Program After Chrome Exploit Exposes Seed Phrases

Trust Wallet has initiated a compensation program for users impacted by a serious security incident involving its Chrome browser extension. Malicious code from a recent update compromised wallet seed phrases, resulting in substantial financial losses. Users can now claim compensation via an official support form.

Key Takeaways

Compensation Process: Affected users can now submit claims on Trust Wallet's official site.
Malicious Chrome Extension: An update led to unauthorized access to wallet seed phrases.
Victim Support: Trust Wallet is actively contacting victims and ensuring claims are verified.
Increase in Scams: Users are warned to be cautious of fraudulent compensation attempts.
Industry Issues: This incident reflects wider vulnerabilities in cryptocurrency wallets.

Trust Wallet Opens $7M Compensation After Chrome Exploit Leaks Seed Phrases

Main Content

Trust Wallet has launched a formal compensation initiative aimed at users impacted by a security breach involving its Chrome browser extension. This incident occurred when malicious code inserted in a recent update exposed users’ wallet seed phrases, resulting in significant losses estimated in the millions of dollars.

On Friday, the company announced that affected users could submit their claims through an official support form available on Trust Wallet’s website.

The claims process requires users to provide identifying information, such as their email address and country of residence. They will also need to submit their compromised wallet addresses, any suspected attacker addresses, and relevant transaction hashes.

Trust Wallet has assured users that all submissions will be reviewed promptly and that the company is committed to compensating every verified victim of the incident.

Trust Wallet Reaches Out to Victims Amid Scam Warnings

In a message shared on X on December 26, Trust Wallet acknowledged the upheaval caused by the breach and confirmed that their support team is already in contact with affected users.

The company noted that each case will require thorough verification to safeguard accuracy and security, and they have pledged to provide updates as the process continues.

Meanwhile, Trust Wallet cautioned users to stay alert for scams, indicating a rise in fake compensation forms, impersonated support accounts, and unsolicited direct messages on platforms like Telegram.

This compensation announcement followed the breach confirmation on December 25, wherein Trust Wallet indicated that only version 2.68 of its Chrome extension was compromised.

Blockchain investigator ZachXBT initially highlighted the incident, revealing that multiple users had experienced unauthorized transactions shortly after installing the problematic update.

Trust Wallet later urged users who had installed the affected version to disable it promptly and upgrade to version 2.69.

ZachXBT reported that the number of victims grew rapidly, with losses exceeding $6 million across various blockchains, including Bitcoin, Solana, and EVM-compatible networks. Some users claimed their wallets were drained within minutes, with one account reporting losses over $300,000, which ZachXBT later flagged as questionable.

Understanding the Chrome Extension Update That Led to This Wallet Heist

Investigators and users noted that the malicious extension appeared genuine when installed as part of Chrome's standard update process.

However, the malicious code enabled attackers to extract users’ recovery phrases, granting them instant access to their funds. One user warned that even importing a seed phrase into the extension would lead to their wallet being drained immediately.

Browser extensions typically come with elevated permissions, allowing them access to web pages, storage, and browsing data, making them attractive targets for cybercriminals when misused.

Trust Wallet has confirmed that users of its mobile app and those with other versions of the browser extension were not affected. According to its Web Store listing, the Chrome extension had approximately one million users.

Changpeng Zhao, the founder of Binance (which acquired Trust Wallet in 2018), also stated in a separate announcement that all verified losses would be reimbursed. Zhao estimated the total amount affected at about $7 million.

This incident occurs against the backdrop of increasing wallet-related security breaches within the cryptocurrency sector.

According to Chainalysis, over $3.4 billion was stolen from January through early December 2025. Notably, a single compromise at Bybit in February accounted for nearly half of that total.

Personal wallet compromises have steadily escalated over recent years, increasing from just over 7% of the total stolen value in 2022 to more than one-third in 2025, excluding attacks like the one at Bybit. While centralized platforms experience fewer breaches, the losses associated with private key compromises have also grown significantly.