Trust Wallet：浏览器扩展 v2.68 事件影响 2,520 个钱包，损失约 850 万美元

Core Insights - Trust Wallet has reported a security incident involving its browser extension v2.68, which affected users who logged in between December 24-26 [1] - A total of 2,520 wallet addresses were confirmed to be compromised, resulting in asset theft amounting to approximately $8.5 million [1] - The stolen funds are linked to 17 wallets controlled by the attackers, and the incident may be related to a broader supply chain attack that occurred in November 2025 [1] Summary by Categories Incident Details - The security breach specifically impacted users of the Trust Wallet browser extension v2.68 during a short window from December 24 to December 26 [1] - The investigation indicates that the attack was facilitated by a malicious version of the extension, which was published using a leaked Chrome Web Store API Key [1] Financial Impact - The total value of assets stolen in this incident is approximately $8.5 million [1] - The number of affected wallet addresses stands at 2,520, highlighting the scale of the breach [1] Related Events - The incident is potentially connected to the Sha1-Hulud supply chain attack that occurred in November 2025, suggesting a larger pattern of vulnerabilities within the industry [1]