Trust Wallet extension returns to Chrome after $8.5M exploit

Cryptopolitan • January 2, 2026

Share: View original

The attack stemmed from a sophisticated supply-chain exploit , with links to the earlier Shai-Hulud npm registry breach. Trust Wallet and Binance ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Trust Wallet Users Lose $8.5 Million in Shai-Hulud Supply Chain Attack Trust Wallet reported that approximately $8.5 million in cryptocurrency was stolen from over 2,500 users due to a cyberattack linked to the Shai-Hulud npm supply chain attack. The attackers accessed Trust Wallet’s browser extension source code and Chrome Web Store API key, allowing them to create a tampered version of the extension with a backdoor to collect sensitive wallet data. 6 sources 26

Extracted Entities

Attack Types (1)

Supply Chain Attack

Companies (1)

Platforms (1)