This morning, cryptocurrency wallet Trust Wallet issued a major security alert, confirming a serious vulnerability in its browser extension version 2.68, which caused users to lose their assets after entering seed phrase, affecting hundreds of victims.
CZ: Trust Wallet will cover user losses.
Since Binance acquired Trust Wallet back in 2018, CZ also posted a statement slightly earlier than X:
The Trust Wallet hack has so far resulted in a loss of $7 million. @TrustWallet will cover the costs. User funds are safe. We apologize for any inconvenience caused.
Was the hacking an inside job?
As the incident unfolded, SlowMist Technology's Security Chief 23pds posted on X, stating:
Based on our analysis, we have reason to believe that the devices or code repositories of Trust Wallet's developers may have been compromised by attackers. Please disconnect from the internet immediately and check the devices of the relevant personnel.
When netizens asked CZ if there was an inside job involved in this crime, CZ said it was very likely.
Are you a Trust Wallet user?
The official announcement states that the affected users are those who have installed the 2.68 version of the extension on their mobile devices. Trust Wallet emphasizes:
We have released version 2.69 for patching. All browser extension users are requested to upgrade immediately.
If you are also a Trust Wallet user and have installed version 2.68, remember "Never import seed phrase" and it's best to upgrade via the official link in the Chrome Web Store. Seed phrase imported into contaminated environments should also be considered leaked; it's best to create a new wallet and migrate your balance (it's recommended to transfer your assets to another brand wallet until the official issue is fully resolved) .
