Trust Wallet

Profile narrative

Trust Wallet, also known as Binance Trust Wallet, is a cryptocurrency wallet provider headquartered in the United States. Its core offering is wallet software used by cryptocurrency users to manage digital assets. The organisation’s confirmed product footprint includes a mobile application and a browser extension. These products are positioned within the cryptocurrency services sector, where wallet providers support users in storing, accessing, and transacting with crypto assets. The available information confirms that Trust Wallet users interact with functions such as seed phrase import and wallet address generation.

Trust Wallet is associated with browser-based and mobile access to crypto wallet functionality, indicating that its services are delivered through consumer software rather than through a described physical branch or institutional platform. No explicit size, user count, revenue, or market share figures are provided. The incident information shows that its browser extension had reached a versioned release cycle through the Chrome Web Store, with version 2.68 distributed to users before being disabled after a security incident. The same information confirms that the mobile app was a separate product line and was not affected by the 2025 browser extension compromise.

A distinguishing operational attribute is its role as a software provider for cryptocurrency wallet access and asset management. The 2022 incident also shows that Trust Wallet relied on open-source libraries in its technical environment, since a vulnerability in such a library affected wallet address generation during a specific nine-day period. That flaw was discovered by a bounty hunter, patched by the company, and linked to approximately $170,000 in losses. Trust Wallet also stated that it would reimburse affected customers whose assets were stolen, showing that customer remediation was part of its incident response.

The 2025 incident involved Trust Wallet’s browser extension version 2.68, where attackers used a leaked API key to submit a malicious update through the Chrome Web Store. The update passed review and was distributed before detection. The malicious code transmitted wallet data to an external domain and activated when a seed phrase was imported. Approximately seven million dollars in cryptocurrency was stolen from users who opened and logged into the compromised extension before mitigation. Trust Wallet suspended the malicious domain, expired related release APIs, processed reimbursement claims, and urged users to upgrade to patched version 2.69. The incident did not affect mobile app users, other extension versions, or users who accessed the extension after the malicious version was disabled. No explicit ownership, parent company, or subsidiary relationship is stated beyond the organisation’s listed alias.

Incidents

2 incidents linked to this organisation.