Over $6M was drained from Trust Wallet users on Christmas
> Trust Wallet browser extension v2.68 was hit by a supply-chain attack on Dec 25, 2025
> Malicious code stole mnemonic phrases from desktop users
> Automated drains followed across BTC, ETH, SOL, and EVM tokens
> Total losses estimated at $6–7M
> ~$4M was laundered via ChangeNOW, KuCoin, and FixedFloat
> v2.69 was released to patch the issue
> CZ said Trust Wallet is committed to full user reimbursement