Short answer: Yes. 2025-12: Malicious browser-extension v2.68 published via leaked Chrome Web Store key; ~$8.5M drained from 2,520 addresses; 2023-04: CVE-2023-31290: Trust Wallet browser extension generated keys with only 32 bits of entropy; exploited Dec 2022 and Mar 2023 (~$170K); Trust Wallet reimbursed affected users; 2023-07: CVE-2024-23660: Trust Wallet iOS used time-seeded randomness for wallet generation; exploited 2023-07-12; Trust Wallet says affected users were notified and migrated; researchers report multiple victims; reimbursement not documented
Data as of · Last updated · By VaultRubric Research · How we score · Not investment advice.
Short answer: Yes. 2025-12: Malicious browser-extension v2.68 published via leaked Chrome Web Store key; ~$8.5M drained from 2,520 addresses; 2023-04: CVE-2023-31290: Trust Wallet browser extension generated keys with only 32 bits of entropy; exploited Dec 2022 and Mar 2023 (~$170K); Trust Wallet reimbursed affected users; 2023-07: CVE-2024-23660: Trust Wallet iOS used time-seeded randomness for wallet generation; exploited 2023-07-12; Trust Wallet says affected users were notified and migrated; researchers report multiple victims; reimbursement not documented
Customer funds were stolen in 2025-12 and we can't show they were fully reimbursed, so under our rules Trust Wallet is capped at 60% and can't be our pick. Regulatory actions in the last 5 years on record: 0.
This page answers “Is Trust Wallet safe?” only from VaultRubric's sourced record (security incidents, regulatory actions, licensing and protections), as of 2026-10-11. It is not a guarantee: no platform is risk-free, and safety also depends on how you use it (2FA, phishing, backups).
Security: 0/10. base 7, −1.5 hot wallet (no secure element), −3 customer funds loss (2025-12), −3 customer funds loss (2023-04), −3 customer funds loss (2023-07)
Overall VaultRubric score across all software wallet options we track: 42.3% (data coverage 83%). How incidents are scored · hack cap.
| Date | Type | What happened | Sources |
|---|---|---|---|
| 2025-12 | customer funds loss | Malicious browser-extension v2.68 published via leaked Chrome Web Store key; ~$8.5M drained from 2,520 addresses | trustwallet.com, thehackernews.com |
| 2023-07 | customer funds loss | CVE-2024-23660: Trust Wallet iOS used time-seeded randomness for wallet generation; exploited 2023-07-12; Trust Wallet says affected users were notified and migrated; researchers report multiple victims; reimbursement not documented | nvd.nist.gov, milksad.info |
| 2023-04 | customer funds loss | CVE-2023-31290: Trust Wallet browser extension generated keys with only 32 bits of entropy; exploited Dec 2022 and Mar 2023 (~$170K); Trust Wallet reimbursed affected users | www.ledger.com, nvd.nist.gov |
None in our sourced record.
Yes. 2025-12: Malicious browser-extension v2.68 published via leaked Chrome Web Store key; ~$8.5M drained from 2,520 addresses; 2023-04: CVE-2023-31290: Trust Wallet browser extension generated keys with only 32 bits of entropy; exploited Dec 2022 and Mar 2023 (~$170K); Trust Wallet reimbursed affected users; 2023-07: CVE-2024-23660: Trust Wallet iOS used time-seeded randomness for wallet generation; exploited 2023-07-12; Trust Wallet says affected users were notified and migrated; researchers report multiple victims; reimbursement not documented
Customer funds were stolen in 2025-12 and we can't show they were fully reimbursed, so under our rules Trust Wallet is capped at 60% and can't be our pick. Regulatory actions in the last 5 years on record: 0. No platform is risk-free; see the full record on this page.
Trust Wallet scores 42.3% across all software wallet options we track, with 83% data coverage. See /methodology.