According to @lookonchain, Trust Wallet has been exploited, affecting hundreds of users with losses exceeding $6.77M; source: https://twitter.com/lookonchain/status/2004432489042039144 and https://t.me/investigations/296. The attacker has already moved about $4.25M to ChangeNOW, FixedFloat, KuCoin, and HTX, indicating active off-ramps across swaps and centralized exchanges; source: https://twitter.com/lookonchain/status/2004432489042039144 and https://t.me/investigations/296. Hacker wallet clusters and transactions can be tracked via the ARKM Intel entity link shared in the report, aiding on-chain monitoring; source: https://intel.arkm.com/explorer/entity/2cd56d11-7f5b-4b00-a2e7-842663509f41 and https://twitter.com/lookonchain/status/2004432489042039144. @lookonchain also reports that CZ stated Trust Wallet will fully cover user losses, which is relevant to user recovery and sentiment; source: https://twitter.com/lookonchain/status/2004432489042039144.

According to PeckShieldAlert, a Trust Wallet exploit has drained over $6 million in crypto from victims, with about $2.8 million still in attacker wallets spanning Bitcoin, EVM chains, and Solana. According to PeckShieldAlert, more than $4 million of the stolen funds has been transferred to centralized venues, including roughly $3.3 million to ChangeNOW, $340,000 to FixedFloat, and $447,000 to KuCoin. According to PeckShieldAlert, the compromised component is Trust Wallet Browser Extension version 2.68, and TrustWallet has urged users on 2.68 to disable the extension and upgrade to version 2.69.