Trust Wallet Hack
What happened
TrustWallet's Web Extension suffered an exploit, which resulted in a loss of 170,000 $USD.
TrustWallet is a cross-chain wallet. The wallet suffered an exploit on WASM vulnerability. TrustWallet announced a vulnerability affecting new addresses created between November 14-23, 2022 using their Browser Extension. The majority of funds at risk had already been secured by users. However, there were still approximately 88,000 $USD left on affected addresses. TrustWallet urged affected users to move their funds as soon as possible and avoid using addresses provided by others.
The team identified two likely exploits with a total loss of 170,000 $USD. To do right by its users, the project created a reimbursement process for affected individuals to make them whole again.
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.