@mariaaz
Trust Wallet released a report on the browser extension incident.
It was officially confirmed that on December 24, a compromised build containing malicious code was included in version v2.68 of the Chrome browser extension.
This allowed attackers to access seed phrases and execute transactions without users’ permission.
The incident affected only this specific version of the extension mobile apps and other versions were not compromised.
The company revoked the vulnerable build and released a safe version, v2.69.
Several thousand affected addresses were identified, with total losses estimated at around $8.5 million.
Affected users can apply for compensation.
0 reply
0 recast
0 reaction