On January 3, the Trust Wallet team published a new statement addressed to users affected by an insecurity incident that impacted version 2.68 of its wallet’s browser extension.
According to the company, the problem reached a small subset of wallets and has already been contained, although requires immediate action by those who were compromised.
In its advisory, Trust Wallet reported that it identified “a limited group of approximately 36,000 wallets (0.016% of our user base) that still have one or more compromised wallets.”
The company clarified that All affected users have already been notified directly. via a security incident banner within the browser extension.
What should affected users do?
According to the statement, Trust Wallet deployed different notification mechanisms to ensure that the warning reached impacted users.
In addition to that banner, for those cases in which the user has not opened the extension and, therefore, has not seen the message, the company explained that it tried to notify through additional channels.
Specifically, he detailed that, if the same wallet address was imported into the mobile version, alerts were sent via «a notification in the mobile application with an action required notice” and also through “a pop-up window when opening the Trust Wallet mobile app.”
The message is clear regarding the steps to follow. “If you have been notified, please abandon the old compromised wallet, create a new wallet and move your funds immediately to ensure your assets remain safe,” Trust Wallet noted.
To make the process easier, the company published a step-by-step guide with detailed instructions.
In contrast, Trust Wallet sought to bring peace of mind to the rest of its users. «If you have not received a notification, you are not affected and no action is required»the team stated in the statement.
As explained by NoticiasVE, the attack affected all wallets that used the Trust Wallet browser extension version 2.68 between December 24 and 26, 2025. Outside of that range of versions and dates, the company maintains that no impacts were detected.
In addition, Trust Wallet also launched a plan to compensate those affected.