Trust Wallet's Chrome extension has been temporarily removed from the Google Chrome Web Store due to a technical bug on Google's side, causing a delay in the release of the v2.69 update designed to assist victims of the recent Christmas Day hack. The hack on December 25, 2025, drained approximately $7 million from 2,596 wallets via a malicious extension posted by an attacker who compromised sensitive development secrets.
Bug, Not a Breach
CEO Eowyn Chen clarified on X that the removal is not a new security incident but a Chrome Web Store bug that prevented the new version from rolling out. "We hit a Chrome Web Store bug while releasing the new version that helps users submit verification codes for reimbursement. Google is aware and escalating the issue. We hope to resolve it soon and urge users to remain vigilant against fake Trust Wallet extensions," Chen stated.
Supply Chain Weakness Exposed
The attack highlights risks in browser extension distribution—attackers targeting build systems and app store pipelines rather than blockchain protocols. Similar exploits like the Sha1-Hulud attack have shown how third-party dependencies can be weaponized. While smart contract logic remains secure, the distribution layer becomes a soft target.
Reimbursement Process on Hold
With over 5,000 claims filed after the hack, the v2.69 update was intended to let affected users submit verification codes to claim refunds. However, until the Chrome Web Store bug is fixed and the official extension is restored, the reimbursement process is stalled. Trust Wallet advises users to avoid any suspicious or fake extensions and only trust the genuine version from the Chrome Web Store once it is re-listed.
Ongoing Efforts
Binance and Trust Wallet continue to coordinate reimbursement behind the scenes. The company warns that phishing attempts may spike during this window. Users are urged to remain cautious and avoid interacting with any unverified browser add-ons claiming to be Trust Wallet.