CZ: Trust Wallet will compensate users for asset losses, the amount stolen amounts to $7 million

After a fatal security breach occurred in Trust Wallet this morning, CZ stated that the hacking attack had caused a loss of US$7 million, and the official would bear the relevant losses.
(Previous summary: Trust Wallet wallet suffered a major security vulnerability! Do not import mnemonic phrases and upgrade to 2.69 as soon as possible, the amount stolen is at least 6 million US dollars)
(Background supplement: What is the "Wallet as a Service" WaaS launched by Trust Wallet, analysis of advantages and disadvantages, can it become mainstream in the future? )

Contents of this article

This Morning Cryptocurrency Wallet Trust Wallet A major security alert was issued, confirming that version 2.68 of its browser extension had a serious vulnerability, causing users to lose their assets after entering a mnemonic phrase, with hundreds of victims.

CZ: Trust Wallet will bear user losses

Since Binance acquired Trust Wallet as early as 2018, CZ also posted on @TrustWallet will cover the costs. User funds are safe and secure. We apologize for any inconvenience caused.

So far, $7m affected by this hack. @TrustWallet will cover. User funds are SAFU. Appreciate your understanding for any inconveniences caused. 🙏

The team is still investigating how hackers were able to submit a new version. https://t.co/xdPGwwDU8b

— CZ 🔶 BNB (@cz_binance) December 26, 2025

Is the hacker the work of an insider?

As the incident unfolded, SlowMist Technology Security Chief 23pds posted on

After our analysis, we have reason to believe that Trust Wallet-related developer equipment or code warehouses may be controlled by attackers. Please disconnect the network in time to check the relevant personnel's equipment. https://t.co/EfAkT2aQDe

— 23pds (山哥) (@im23pds) December 26, 2025

When netizens asked CZ whether an insider was responsible for this crime, CZ also said that it was very possible.

Are you a Trust Wallet user?

The official notice pointed out that the affected objects are users who have installed version 2.68 extension function on the mobile version. Trust Wallet emphasizes:

"We have released a patch for version 2.69, please all browser extension users to upgrade immediately."

If you are also a Trust Wallet user and have installed version 2.68, remember to "do not import the mnemonic phrase" and it is best to upgrade through the official link of the Chrome Online App Store. Mnemonic words imported in a contaminated environment are also best treated as leaks, and it is best to create a new wallet and migrate the balance (it is recommended that assets be transferred to other brand wallets before the official problem is completely solved).