Trust Wallet reported that its v2.68 browser extension was compromised between Dec. 24–26, resulting in $8.5 million stolen from 2,520 wallets. The breach was traced to leaked API keys linked to the November ‘Sha1-Hulud’ supply-chain incident involving stolen GitHub and Chrome Web Store API access. Trust Wallet released v2.69, pledged full reimbursement, and is reviewing over 5,000 user claims. Affected users are advised to move funds and submit the official claim form.