🚨 Security Alert It appears that the @TrustWallet browser extension...
Akinator | Testnet Arc@0xakinator
18 views
Dec 26, 2025
~1 min read
Advertisement
1
🚨 Security Alert
It appears that the @TrustWallet browser extension may have been compromised via a supply-chain attack in the Dec 24 update.
Reports indicate that importing a seed phrase into the extension can result in immediate wallet draining.
⚠️ Do NOT use the Trust Wallet extension for now, and never import seed phrase until an official clarification and fix are released.
❗ As of now, there has been no official communication from the Trust Wallet team regarding this incident.
Exploiters are using multiple addresses and More than $2,000,000 appears to have been drained
It appears that the @TrustWallet browser extension may have been compromised via a supply-chain attack in the Dec 24 update.
Reports indicate that importing a seed phrase into the extension can result in immediate wallet draining.
⚠️ Do NOT use the Trust Wallet extension for now, and never import seed phrase until an official clarification and fix are released.
❗ As of now, there has been no official communication from the Trust Wallet team regarding this incident.
Exploiters are using multiple addresses and More than $2,000,000 appears to have been drained
2
So here’s what’s happening :
In the Trust Wallet browser extension code 4482.js
a recent update added hidden code that silently sends wallet data outside
It pretends to be analytics, but it tracks wallet activity and triggers when a seed phrase is imported
The data was sent to metrics-trustwallet[.]com a domain registered days ago and now down
In the Trust Wallet browser extension code 4482.js
a recent update added hidden code that silently sends wallet data outside
It pretends to be analytics, but it tracks wallet activity and triggers when a seed phrase is imported
The data was sent to metrics-trustwallet[.]com a domain registered days ago and now down
