The fallout from the incident concerning Trust Wallet's Chrome extension expanded on December 26. Mr. Changpeng Zhao publicly expressed his views and pointed to the possibility of internal stakeholders' involvement.
This comment was made at a time when Trust Wallet acknowledged that approximately $7 million worth of user assets were affected.
The focus of the investigation is the involvement of internal stakeholders.
Mr. Changpeng Zhao emphasized that Trust Wallet will fully compensate affected users and stated that customer assets are safe.
Meanwhile, he stated that an investigation is ongoing into why the update for the malicious extension passed distribution management, pointing out that the likelihood of internal wrongdoing is 'highest'.
This statement has raised concerns not only about external attacks but also about internal access and update governance.
Trust Wallet later clarified that this incident only affected Browser Extension version 2.68 and did not impact mobile users or other versions.
The company is making final adjustments to the compensation process and stated that it will provide clear guidance for affected users.
On the other hand, they are urging users to be wary of phishing scams that pose as official support.
Suspicions of internal involvement are particularly drawing attention in the field of cryptocurrency security. Updates to browser extensions require signing keys, developer authentication, and approval workflows.
If a malicious build is distributed through the legitimate Chrome Web Store, investigations typically verify credential leaks or direct internal access.
In either case, the issue is not traditional software vulnerabilities but rather the laxity in operational security.
Such risks are not theoretical. Over the past year, several large-scale incidents involving browser extensions have occurred, resulting from developer account takeovers and breaches of release pipelines.
TWT token temporarily fell but rebounded.
The market reflected a sense of uncertainty. Trust Wallet's native token TWT plummeted after the initial report on December 25.
However, since it has been confirmed that the losses are limited and compensation will be provided, the price stabilized and rebounded on December 26.
Trust Wallet quickly moved to resolve the situation, but this incident highlighted challenges across the entire industry.
As cryptocurrency wallets increasingly rely on browser extensions, the safety of updates and internal risk management have become critical attack vectors, not secondary issues.
