Trust Wallet 发布浏览器扩展安全警报：用户需要了解的内容

Trust Wallet 解决了影响其 Chrome 浏览器扩展 v2.68 的安全事件，并促使紧急更新。了解风险和建议的行动。

Trust Wallet Issues Urgent Security Alert for Browser Extension

Trust Wallet 针对浏览器扩展发出紧急安全警报

In a recent development that has sent ripples through the cryptocurrency community, Trust Wallet has issued a critical security alert concerning its Chrome Browser Extension. The issue, specifically impacting version 2.68, has prompted an immediate call for users to update to the latest version, 2.69, to safeguard their digital assets.

最近在加密货币社区引起轩然大波的一项进展是，Trust Wallet 发布了有关其 Chrome 浏览器扩展的严重安全警报。该问题特别影响 2.68 版本，因此我们立即呼吁用户更新到最新版本 2.69，以保护他们的数字资产。

The Security Vulnerability Explained

安全漏洞解释

The security concern surfaced following reports of wallet drains linked to the update of Trust Wallet's browser extension to version 2.68 on December 24th, 2025. While Trust Wallet has not yet disclosed the full technical details of the vulnerability, they have confirmed that it exclusively affects this specific desktop browser extension. Crucially, mobile users and other versions of the extension remain unaffected. The company's swift action in releasing version 2.69 on December 25th, 2025, demonstrates a commitment to addressing the threat promptly. Early estimates suggest potential losses in the range of $6 million to $7 million across multiple blockchain networks.

继 2025 年 12 月 24 日 Trust Wallet 的浏览器扩展更新至版本 2.68 导致钱包流失的报告之后，安全问题浮出水面。虽然 Trust Wallet 尚未披露该漏洞的完整技术细节，但他们已确认该漏洞仅影响此特定的桌面浏览器扩展。至关重要的是，移动用户和其他版本的扩展程序不受影响。该公司迅速采取行动，于 2025 年 12 月 25 日发布了 2.69 版本，这表明了其迅速解决威胁的承诺。初步估计表明多个区块链网络的潜在损失在 600 万至 700 万美元之间。

Why Browser Extensions are a High-Risk Surface

为什么浏览器扩展是高风险的表面

This incident serves as a stark reminder of the inherent risks associated with browser extensions in the Web3 space. These extensions act as a primary gateway for users interacting with decentralized applications (dApps) and signing transactions. Their close proximity to user sessions and sensitive data makes them a prime target for malicious actors. Even brief vulnerabilities can have significant consequences. The structural realities of browser-based wallets mean that constant vigilance is paramount for users relying on these tools for self-custody.

这一事件清楚地提醒我们，Web3 领域中与浏览器扩展相关的固有风险。这些扩展充当用户与去中心化应用程序 (dApp) 交互和签署交易的主要网关。它们距离用户会话和敏感数据很近，这使得它们成为恶意行为者的主要目标。即使是短暂的漏洞也会产生严重的后果。基于浏览器的钱包的结构现实意味着，对于依赖这些工具进行自我保管的用户来说，持续保持警惕至关重要。

Trust Wallet's Response and User Guidance

Trust Wallet 的回应和用户指南

Trust Wallet has been proactive in its communication, advising users of version 2.68 to immediately disable the extension and upgrade to version 2.69 via the official Chrome Web Store. The company reiterated its commitment to user privacy, stating that it does not collect personal data and that users retain full control over their private keys. For users who may have imported or entered their seed phrase while using the affected version 2.68, Trust Wallet advises treating that seed phrase as compromised. The recommended course of action in such cases is to migrate assets to a new wallet created with a fresh seed phrase. Trust Wallet has also confirmed that it will refund all affected users, with further instructions to be provided soon.

Trust Wallet 一直积极主动进行沟通，建议 2.68 版本的用户立即禁用该扩展程序，并通过官方 Chrome 网上应用店升级到 2.69 版本。该公司重申了对用户隐私的承诺，表示不收集个人数据，并且用户保留对其私钥的完全控制权。对于在使用受影响的版本 2.68 时可能导入或输入助记词的用户，Trust Wallet 建议将该助记词视为已泄露。在这种情况下，建议的操作方案是将资产迁移到使用新种子短语创建的新钱包。 Trust Wallet 还确认将向所有受影响的用户退款，并将很快提供进一步说明。

Navigating the Aftermath: Moving Forward

渡过余波：继续前进

While the immediate focus is on updating the extension, the incident underscores the importance of robust security practices in the crypto world. Users are urged to be cautious of potential phishing attempts or scams that may arise during this remediation period, with scammers impersonating the Trust Wallet team. The crypto market, while showing some movement in response to the news, did not experience a drastic downturn, with Trust Wallet Token (TWT) showing modest gains. As Trust Wallet continues its investigation and provides further disclosures, the community will gain a clearer understanding of the root cause and preventative measures. For now, the message is clear: update your extension, and if you suspect your seed phrase was compromised, take immediate steps to secure your funds.

虽然当前的重点是更新扩展，但该事件强调了加密世界中强大的安全实践的重要性。我们敦促用户警惕在此修复期间可能出现的潜在网络钓鱼尝试或诈骗，其中诈骗者会冒充 Trust Wallet 团队。加密货币市场虽然因这一消息而出现一些波动，但并没有经历大幅下滑，Trust Wallet Token (TWT) 也出现了小幅上涨。随着 Trust Wallet 继续调查并提供进一步披露，社区将对根本原因和预防措施有更清晰的了解。目前，信息很明确：更新您的扩展程序，如果您怀疑您的助记词已被泄露，请立即采取措施确保您的资金安全。

Stay safe out there, and happy HODLing!

保持安全，祝持有快乐！