A narrow security window left some wallets exposed but most users remain unaffected
Trust Wallet is urging a small group of users to take immediate action after confirming that a security issue affected its browser extension late last year. According to the company, around 36,000 users are still using wallets that may be compromised due to a flaw tied specifically to Browser Extension version 2.68, which was live between December 24 and December 26, 2025.
The issue impacts roughly 0.016% of Trust Wallet’s total user base, but the company is treating it seriously given the potential risk to funds. Affected users have been notified directly through banners in the browser extension and alerts in the mobile app, warning them to stop using the old wallet and move assets as soon as possible.
What actually went wrong
The security issue only applies to users who opened and logged into version 2.68 of the browser extension during that short three-day window. Trust Wallet has been clear that mobile app users were not affected, nor were users running earlier or later versions of the extension.
While the company hasn’t shared technical specifics of the vulnerability, early estimates suggest that around $7 million in assets may have been impacted. That figure is still under review as the investigation continues.
Importantly, users who did not receive a notification are not affected. Trust Wallet stressed that the warning is targeted, not a blanket alert, and that there’s no need for panic if no message appeared in the app or extension.
What affected users should do right now
Trust Wallet laid out a clear, step-by-step response for anyone flagged by the alert. The first step is to update the browser extension to version 2.69 or later. From there, users are instructed to abandon the old wallet entirely.
That means creating a brand-new wallet, either through the updated browser extension or the mobile app, and transferring all funds from the old wallet into the new one. Trust Wallet also reminded users to securely back up their recovery phrase, emphasizing that this step is critical for long-term wallet safety.
The company has published visual guides showing exactly how to update the extension, create a new wallet, and move funds, aiming to reduce confusion during what can be a stressful process.
Support and next steps
For users who believe they may have already lost funds, Trust Wallet has opened a dedicated support channel. Affected users are encouraged to submit a report through a special form, where cases will be reviewed individually. The company noted that additional information may be required to confirm wallet ownership before any recovery assistance can be provided.
The key message from Trust Wallet is urgency without alarm. The issue is contained, well-defined, and already patched, but users who fall into the affected group shouldn’t delay action.
A reminder about wallet hygiene
While incidents like this are rare, they highlight an uncomfortable truth about self-custody: users are their own first line of defense. Keeping extensions updated, acting quickly on official alerts, and never reusing a wallet after a compromise are basic habits that can make the difference between a close call and a costly mistake.
For most Trust Wallet users, this episode will pass unnoticed. For the 36,000 affected, though, the clock is ticking and moving funds sooner rather than later is the safest move.