Trust Wallet committed to fully reimbursing users following a $7 million Christmas Eve exploit caused by a malicious code update to its Chrome browser extension.
Crypto theft and exploit losses totaled about US$76 million (AU$116.2 million) in December, down 60% from US$194.2 million (AU$297.1 million) in November, according to blockchain security firm PeckShield.
The firm said it tracked 26 major incidents during the month. The biggest single loss was a US$50 million (AU$76.5 million) address-poisoning scam.
In this type of fraud, an attacker sends small “bait” transfers from a wallet address that closely resembles a real one, hoping the victim later selects the wrong address from their transaction history. The lookalike often matches the first and last characters of the legitimate address.
PeckShield said another large case involved about US$27.3 million (AU$41.7 million) stolen after a private key leak led to a multi-signature wallet being compromised.
Keep in mind that hacks in the first half of 2025 hit a record high and were driven by nation-states and geopolitically motivated groups, marking a clear shift in crypto hacking, as Crypto News Australia reported.
The Trust Wallet Incident
Among the higher-profile incidents in December, PeckShield cited the Christmas Trust Wallet attack that drained about US$7 million (AU$10/7 million) from users and the US$3.9 million (AU$5.9 million) exploit involving Flow.
The team said in a blog post that all affected users will be reimbursed, but no concrete plan has been shared yet.
PeckShield said the Trust Wallet issue affected its browser extension and noted that browser-based wallets are typically always online, which can increase exposure to certain attacks.
Read more on Crypto News Australia
