Trust Wallet to Compensate $7M Loss from Christmas Day Hack
Key Takeaways
- Trust Wallet users suffered a loss of $7 million on Christmas Day due to a planned exploit starting in early December.
- The exploitation involved the Trust Wallet extension, exposing user data through a backdoor possibly linked to insider activity.
- Binance’s Changpeng Zhao promised reimbursement to affected users, highlighting the increasing risk of wallet exploits in the crypto sector.
- Cybersecurity firm SlowMist suggests insider involvement due to the attacker’s intimate knowledge of the Trust Wallet extension’s code.
- Trust Wallet urged users to update to the latest browser extension version to secure their assets.
WEEX Crypto News, 2025-12-26 10:15:09
A New Chapter in Cryptocurrency Vulnerabilities
In the wieldy world of cryptocurrency, the recent exploit of Trust Wallet underscores a recurring threat characterized by innovative and often nefarious undertakings. On Christmas Day, a planned attack resulted in the loss of around $7 million from Trust Wallet users’ accounts. This breach, marked by a cleverly inserted backdoor within the wallet’s browser extension, represents not just a financial loss but a significant breach in user privacy.
As we delve into the specifics of this exploit, it becomes essential to highlight how such security breaches are indicative of a broader vulnerability within the crypto sphere. Cryptocurrency wallets, both hardware and software-based, are repeatedly targeted due to the immensity of digital assets they potentially contain. In this evolving tech landscape, brand trust plays a pivotal role in user engagement and retention; however, incidents such as these pose formidable challenges to maintaining that trust.
Detailing the Incident
The timeline of the exploit, as detailed by SlowMist, a reputable cybersecurity entity, traces back to early December, specifically December 8. During this period, preparations for the hack commenced, culminating in the successful implantation of a backdoor by December 22. This malicious code was designed to collect users’ sensitive personal data, which was subsequently transmitted to the attacker’s server.
Cryptocurrency security specialist ZachXBT noted that “hundreds” of Trust Wallet users were victimized by this operation. The seamless yet sinister submission of a compromised Trust Wallet extension onto the website suggests a breach of inside controls and approvals, thereby raising red flags about potential insider collusion.
Cryptocurrency Titans Step In
The cryptocurrency landscape is no stranger to incidents of such magnitude, though the Trust Wallet hack, valued at $7 million, pales in comparison to other notorious breaches. The February 2024 hack of Jeff Zirlin, co-founder of Axie Infinity, is one illustrative example, resulting in a $9.7 million Ether loss. Despite the relatively smaller scale of the Trust Wallet incident, its implications on user trust and brand image are profound.
Binance, a leading cryptocurrency exchange and owner of Trust Wallet, acted swiftly. Changpeng Zhao, more commonly known as CZ, assured users in a public communication that the lost funds would be reimbursed. This immediate response by Binance not only underscores the acknowledgement of their responsibility but also attempts to restore faith among crypto users wary of such persistent threats.
Assessing the Risk – From Hackers to Insiders
The identified methodology used in the Trust Wallet exploit continues to feed speculation and analysis. The potential involvement of insiders is particularly alarming, as it suggests vulnerabilities not only in technological defense mechanisms but also in corporate oversight.
Anndy Lian, a blockchain consultant of international repute, opined on the suspicious nature of the attack, signifying the possibility of current or former employees being complicit. When organizations face data breaches, particularly when involving insiders who leverage their trust and access, the ramifications are severe — both ethically and operationally.
The Path Forward
While the primary focus remains on reinforcing Trust Wallet’s security protocols, it is clear that this incident forms part of a broader narrative involving cybersecurity and decentralized finances. The risks tied to digital wallets necessitate not just sophisticated technological solutions but also robust measures involving human oversight and user education.
Trust Wallet has recommended an immediate upgrade to version 2.89 of their browser extension for all its users. This proactive step is crucial, though it represents just the beginning of a comprehensive approach needed to combat such incidents in the digital asset domain.
The Role of WEEX in Safeguarding Assets
Within this milieu, WEEX continues to prioritize security and user experience, offering a platform fortified against such threats. Our commitment is demonstrated by continually updating security measures and ensuring our users remain informed and prepared against any potential vulnerabilities. By aligning with trustworthy and advanced cryptocurrency exchanges like WEEX, users protect not only their assets but also their peace of mind.
A Vigilant Community
Trust Wallet’s breach serves as a pertinent reminder for the crypto community to remain ever vigilant. As digital assets gain wider adoption, the onus is on all stakeholders to proactively foster an environment of security and trust. Each participant, from developers to end-users, carries a shared responsibility in nurturing a secure crypto ecosystem.
For those in the digital currency domain, this incident underscores the importance of preserving asset security, securing sensitive information, and maintaining awareness of potential threats. The cryptocurrency sector, often likened to a fast-paced frontier, has demonstrated resilience amid adversity. However, continued vigilance is paramount to protect both the pioneering spirit and wallet balances of its community members.
Frequently Asked Questions
What is Trust Wallet?
Trust Wallet is a secure, open-source, and decentralized crypto wallet that allows users to store a wide variety of digital assets. Owned by Binance, it boasts features designed to facilitate ease of use and enhanced security for all cryptocurrency transactions.
How did the Trust Wallet hack occur?
The hack was engineered through a malicious backdoor in Trust Wallet’s browser extension. This cyber-attack exposed users’ personal data and resulted in the unauthorized transfer of approximately $7 million worth of cryptocurrency.
Was insider activity involved in the Trust Wallet hack?
While an investigation is ongoing, some indicators suggest that the hack might have involved insider knowledge due to the attacker’s intimate familiarity with the Trust Wallet extension’s source code.
What actions have been taken to rectify the situation?
In response to the breach, Binance, the parent company of Trust Wallet, has promised to reimburse the affected users. Moreover, customers are being advised to upgrade their browser extension to the latest version to secure their accounts.
How can WEEX users protect themselves against similar threats?
WEEX users are encouraged to implement robust security practices, such as enabling two-factor authentication, keeping software up-to-date, and regularly monitoring account activity. By prioritizing cybersecurity, users can significantly mitigate the risks of asset theft.
You may also like

From x402 to MPP: Cloudflare's crucial vote, will it go to Coinbase or Stripe?

BlackRock CEO issues annual open letter: The wave of tokenization has arrived, and we will lead this trend

When Backpack backstabs the community

When gold is no longer a safe haven, and Bitcoin continues to panic

Trump, the World's Largest Oil Trader

If the US and Iran have not reached an agreement in 5 days, what other cards does Trump have?

Tether Whale Dumps £12 Million, Backing Crypto’s ‘British Trump’

Ethereum Foundation Post: Rethinking the Division of Work Between L1 and L2 to Build the Ultimate Ethereum Ecosystem

Two Major Prediction Market Platforms Unite Rarely, What Is the Story Behind This New Fund?

WEEX Official Product Launch: Win LALIGA Tickets & Unlock the 3-in-1 Crypto Trading Suite
Trade crypto without downloading an app. Join the WEEX H5, API, SKILLs livestream to explore the new trading experience, win LALIGA VIP tickets, and share 420 USDT rewards.

Dragonfly Partners: Most agents will not engage in autonomous trading, how can crypto payments prevail?

US AI Startup Goes All In on Chinese Mega-Model | Rewire News Morning Brief

Trump Lies Again: A "Five-Day Pause" Psyop, How Wall Street, Bitcoin, and Polymarket Insiders Synced Uposciogen

When a Token Becomes Labor, People Become the Interface

Ceasefire News Leaked Ahead of Time? Large Polymarket Bets on Outcome Before Trump's Tweet

BlackRock CEO's Annual Shareholder Letter: How is Wall Street Using AI to Keep Profiting from National Pension Funds?

Sun Valley Releases 2025 Financial Report: Bitcoin Mining Revenue Reaches $670 Million, Accelerating Transformation to AI Infrastructure Platform
On March 16, 2026, in Dallas, Texas, USA, CanGu Company (New York Stock Exchange code: CANG, hereinafter referred to as "CanGu" or the "Company") today announced its unaudited financial performance for the fourth quarter and full year ended December 31, 2025. As a btc-42">bitcoin mining enterprise relying on a globally operated layout and dedicated to building an integrated energy and AI computing power platform, CanGu is actively advancing its business transformation and infrastructure development.
• Financial Performance:
Total revenue for the full year 2025 was $688.1 million, with $179.5 million in the fourth quarter.
Bitcoin mining business revenue for the full year was $675.5 million, with $172.4 million in the fourth quarter.
Full-year adjusted EBITDA was $24.5 million, while the fourth quarter was -$156.3 million.
• Mining Operations and Costs:
A total of 6,594.6 bitcoins were mined throughout the year, averaging 18.07 bitcoins per day; of which 1,718.3 bitcoins were mined in the fourth quarter, averaging 18.68 bitcoins per day.
The average mining cost for the full year (excluding miner depreciation) was $79,707 per bitcoin, and for the fourth quarter, it was $84,552;
The all-in sustaining costs were $97,272 and $106,251 per bitcoin, respectively.
As of the end of December 2025, the company has cumulatively produced 7,528.4 bitcoins since entering the bitcoin mining business.
• Strategic Progress:
The company has completed the termination of the American Depositary Receipt (ADR) program and transitioned to a direct listing on the NYSE to enhance information transparency and align with its strategic direction, with a long-term goal of expanding its investor base.
CEO Paul Yu stated: "2025 marked the company's first full year as a bitcoin mining enterprise, characterized by rapid execution and structural reshaping. We completed a comprehensive adjustment of our asset system and established a globally distributed mining network. Additionally, the company introduced a new management team, further strengthening our capabilities and competitive advantage in the digital asset and energy infrastructure space. The completion of the NYSE direct listing and USD pricing also signifies our transformation into a global AI infrastructure company."
"As we enter 2026, the company will continue to optimize its balance sheet structure and enhance operational efficiency and cost resilience through adjustments to the miner portfolio. At the same time, we are advancing our strategic transformation into an AI infrastructure provider. Leveraging EcoHash, we will utilize our capabilities in scalable computing power and energy networks to provide cost-effective AI inference solutions. The relevant site transformations and product development are progressing simultaneously, and the company is well-positioned to sustain its execution in the new phase."
The company's Chief Financial Officer, Michael Zhang, stated: "By 2025, the company is expected to achieve significant revenue growth through its scaled mining operations. Despite recording a net loss of $452.8 million from ongoing operations, mainly due to one-time transformation costs and market-driven fair value adjustments, the company, from a financial perspective, will reduce its leverage, optimize its Bitcoin reserve strategy and liquidity management, introduce new capital to strengthen its financial position, and seize investment opportunities in high-potential areas such as AI infrastructure while navigating market volatility."
The total revenue for the fourth quarter was $1.795 billion. Of this, the Bitcoin mining business contributed $1.724 billion in revenue, generating 1,718.3 Bitcoins during the quarter. Revenue from the international automobile trading business was $4.8 million.
The total operating costs and expenses for the fourth quarter amounted to $4.56 billion, primarily attributed to expenses related to the Bitcoin mining business, as well as impairment of mining machines and fair value losses on Bitcoin collateral receivables.
This includes:
· Cost of Revenue (excluding depreciation): $1.553 billion
· Cost of Revenue (depreciation): $38.1 million
· Operating Expenses: $9.9 million (including related-party expenses of $1.1 million)
· Mining Machine Impairment Loss: $81.4 million
· Fair Value Loss on Bitcoin Collateral Receivables: $171.4 million
The operating loss for the fourth quarter was $276.6 million, a significant increase from a loss of $0.7 million in the same period of 2024, primarily due to the downward trend in Bitcoin prices.
The net loss from ongoing operations was $285 million, compared to a net profit of $2.4 million in the same period last year.
The adjusted EBITDA was -$156.3 million, compared to $2.4 million in the same period last year.
The total revenue for the full year was $6.881 billion. Of this, the revenue from the Bitcoin mining business was $6.755 billion, with a total output of 6,594.6 Bitcoins for the year. Revenue from the international automobile trading business was $9.8 million.
The total annual operating costs and expenses amount to $1.1 billion.
Specifically, they include:
· Revenue Cost (excluding depreciation): $543.3 million
· Revenue Cost (depreciation): $116.6 million
· Operating Expenses: $28.9 million (including related-party expenses of $1.1 million)
· Miner Impairment Loss: $338.3 million
· Bitcoin Collateral Receivable Fair Value Change Loss: $96.5 million
The full-year operating loss is $437.1 million. The continuing operations net loss is $452.8 million, while in 2024, there was a net profit of $4.8 million.
The 2025 non-GAAP adjusted net profit is $24.5 million (compared to $5.7 million in 2024). This measure does not include share-based compensation expenses; refer to "Use of Non-GAAP Financial Measures" for details.
As of December 31, 2025, the company's key assets and liabilities are as follows:
· Cash and Cash Equivalents: $41.2 million
· Bitcoin Collateral Receivable (Non-current, related party): $663.0 million
· Miner Net Value: $248.7 million
· Long-Term Debt (related party): $557.6 million
In February 2026, the company sold 4,451 bitcoins and repaid a portion of related-party long-term debt to reduce financial leverage and optimize the asset-liability structure.
As per the stock repurchase plan disclosed on March 13, 2025, as of December 31, 2025, the company had repurchased a total of 890,155 shares of Class A common stock for approximately $1.2 million.

