Trust Wallet Users Lose $8.5 Million in Shai-Hulud Supply Chain Attack

Trust Wallet Users Lose $8.5 Million in Shai-Hulud Supply Chain Attack

First seen 2 Jan 2026, 16:28 UTC •ThecyberexpressBleepingcomputerScworldCryptopolitanOnesafe+1 •69% similarity •26.2

Article Content

Browse articles
ThreatCluster

Trust Wallet reported that approximately $8.5 million in cryptocurrency was stolen from over 2,500 users due to a cyberattack linked to the Shai-Hulud npm supply chain attack. The attackers accessed Trust Wallet’s browser extension source code and Chrome Web Store API key, allowing them to create a tampered version of the extension with a backdoor to collect sensitive wallet data.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Sha1-Hulud Shai-hulud 2.0 Shai Hulud Shai-Hulud Npm Supply Chain Attack Binance Trust Wallet Chrome Web Store GitHub Npm Registry