TLDR
- Trust Wallet users report unauthorized fund withdrawals after recent Chrome extension update, raising security concerns.
- Malicious browser extensions can capture credentials and API keys, routing data through attacker-controlled proxies.
- ZachXBT urges Trust Wallet users to move funds and review transactions after multiple reports of drained wallets.
- Trust Wallet has not confirmed the root cause of recent breaches, but timing suggests a possible vulnerability from the update.
Blockchain investigator ZachXBT recently alerted Trust Wallet users after several reported unauthorized withdrawals from their wallets. The incidents occurred over a few hours on December 25. Although the cause of the breaches is still unclear, users are advised to temporarily move their funds. These reports have raised concerns about the wallet’s security, especially following a recent update to Trust Wallet’s Chrome extension.
Multiple Trust Wallet Users Report Unauthorized Fund Drains
According to ZachXBT, several Trust Wallet users experienced unauthorized transactions. These users discovered their funds were drained without their approval. Affected users have shared their wallet addresses to help investigate the issue. ZachXBT has asked anyone affected to come forward so the scope of the problem can be assessed.
NEW: @zachxbt SAYS “A NUMBER OF TRUST WALLET USERS HAVE REPORTED THAT FUNDS WERE DRAINED FROM WALLET ADDRESSES WITHIN THE PAST COUPLE OF HOURS”
SOURCE: https://t.co/4shDweZnJF pic.twitter.com/MkbQWZKGCc
— DEGEN NEWS (@DegenerateNews) December 25, 2025
Although the root cause has not been confirmed, the timing of the incidents has raised suspicion. The breaches occurred shortly after a recent update to Trust Wallet’s Chrome extension. This update might have introduced a vulnerability, but Trust Wallet has not provided an official explanation.
Browser-Based Wallet Extensions and Security Risks
Browser-based wallets, especially extensions, are known to have security risks. These extensions can capture credentials, API keys, and session tokens. They then route this data through attacker-controlled proxies, often without any obvious signs of compromise. Such vulnerabilities make browser-based wallets more susceptible to malicious attacks, as even legitimate updates can introduce hidden threats.
Malicious Chrome extensions posing as legitimate tools have been found quietly intercepting user traffic once installed.
These extensions capture credentials, API keys and session tokens, then route data through attacker-controlled proxies without obvious signs of compromise.… pic.twitter.com/20084l8gV1
— Web3 Antivirus (@web3_antivirus) December 24, 2025
Trust Wallet’s recent issues may be linked to these types of risks. The recent update to its Chrome extension has reignited concerns about the safety of browser-based wallets. This type of vulnerability could allow attackers to drain funds without users noticing. These risks have made users more cautious about using such wallets for long-term storage.
Community Urged to Review Transactions and Secure Funds
As a precaution, users have been urged to review recent transactions. It is recommended that they revoke any unnecessary permissions and avoid signing new transactions. ZachXBT has also advised users to move their funds to new wallets created with fresh seed phrases. This advice aims to protect users from further risks, should their current wallets be compromised.
Trust Wallet has not yet provided detailed information about the cause of the breaches. The crypto community is eagerly awaiting an official response from the wallet provider. Until then, users are encouraged to stay alert and take the necessary steps to secure their funds.
The situation highlights the ongoing security risks associated with crypto wallets, particularly browser extensions. Users are reminded to take extra precautions and ensure their wallets remain secure as investigations continue.




