Today's Top #3: Christmas Heist | Analysis of Trust Wallet Browser Extension Hack
tldr; Trust Wallet's browser extension version 2.68 was found to contain malicious code that allowed attackers to extract users' mnemonic phrases and private keys. The attackers used a domain, metrics-trustwallet.com, to exfiltrate data and leveraged the PostHog analytics library for data transmission. The breach originated from internal code tampering, suggesting a professional APT-level attack. Trust Wallet advised users to disable version 2.68 and upgrade to version 2.69 to mitigate the risk.
*This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.
Posted Dec 30, 2025, 9:00 PM UTC
10