Trust Wallet Security Breach: Compensation Guide for Affected Users

What Happened: The Chrome Extension Hacking 101

Trust Wallet’s Google Chrome extension fell victim to a sophisticated attack between December 24-26, when malicious code was injected into version 2.68 of the plugin. Users who logged in during this window faced a critical risk: attackers intercepted their seed phrases through malicious JavaScript, potentially gaining full access to their wallets. Early reports indicate the breach compromised approximately $7 million in user funds.

The attack likely exploited leaked API keys used in the plugin’s distribution process through Chrome’s marketplace, though the exact injection method remains under investigation. This represents a significant security incident affecting the self-custody wallet community.

How to Claim Your Reimbursement: Step-by-Step Process

CEO Eowyn Chen announced an official reimbursement program for all affected users. Here’s what you need to do:

Required Information for Your Claim:

• Your email address
• Wallet address that was compromised
• Hacker’s wallet address(es)
• Transaction hash(es) showing the fund drain
• Amount of funds lost
• New wallet address where compensation should be sent

Users should only file claims through the official compensation dashboard—avoid any third-party platforms or unofficial channels. Chen specifically recommends creating a brand new wallet exclusively for receiving your reimbursement payment.

Important Security Note: The legitimate program will never request your passwords, personal identification data, or seed phrases. Be cautious of impersonation scams attempting to exploit this incident.

Residence Documentation for Legal Proceedings

The Trust Wallet team is also collecting victim location information to support criminal investigations against the perpetrators. This data strengthens the case for potential prosecution.

Protecting Yourself: What You Should Know

This incident underscores why seed phrase security is non-negotiable. Attackers didn’t require your password or two-factor authentication—they went straight for your recovery phrase, which gives complete wallet control. If your seed phrase was exposed, the safest approach is to move your assets to a new wallet immediately, even before claiming compensation.

Verify all official communications directly through Trust Wallet’s verified social media accounts and official website. Scammers are already capitalizing on this security event to launch fake compensation schemes.