Trust Wallet users report unexplained fund drainage

Dubovoi, who has utilized the wallet for five years, discovered the missing balance upon opening the application. He shared a transaction hash—6e26ec6faf90f1c9f484e5f19d29a207da0c55918191c8dbf20625d9250ac25d—as evidence, though the specific mechanism behind the transfer remains unidentified. While some users, such as one individual who recently lost assets after interacting with a fake support representative on the NEAR Protocol Discord server, can trace their losses to social engineering, Dubovoi’s case lacks a clear point of entry.

Trust Wallet operates as a self-custody service, placing the burden of private key protection entirely on the user. However, the platform is no stranger to systemic vulnerabilities. In December 2025, a malicious update to the browser extension allowed attackers to siphon approximately $7 million from user wallets. That breach, flagged by investigator ZachXBT, was traced to compromised source code distributed through the Chrome Web Store. Beyond software exploits, the platform faces constant threats from phishing campaigns and malicious smart contract permissions that grant third parties spending authority without requiring a recovery phrase.