Trust Wallet's browser extension suffered a security breach from December 24-26, 2025, affecting 2,520 wallets and stealing $8.5 million via malicious code introduced through an API key leak. The hack is linked to the November Sha1-Hulud supply chain attack involving leaked GitHub credentials to access Chrome Web Store APIs. Trust Wallet has released a patched version, disabled compromised credentials, and is actively compensating victims while advising users to move their funds to new wallets.