Skip to content
Trust Wallet Users Lose $8.5 Million in Shai-Hulud Supply Chain Attack

Trust Wallet Users Lose $8.5 Million in Shai-Hulud Supply Chain Attack

First seen 2 Jan 2026, 16:28 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

Trust Wallet reported that approximately $8.5 million in cryptocurrency was stolen from over 2,500 users due to a cyberattack linked to the Shai-Hulud npm supply chain attack. The attackers accessed Trust Wallet’s browser extension source code and Chrome Web Store API key, allowing them to create a tampered version of the extension with a backdoor to collect sensitive wallet data.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 182d ago How this analysis works

More articles in this cluster (6)

Following this threat?

Track Sha1-Hulud and Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed