News

Trust Wallet has disclosed that a major security breach affecting its Google Chrome browser extension was the result of a broader software supply chain attack linked to the second wave of the Shai-Hulud, also known as Sha1-Hulud, campaign observed in November 2025. The incident ultimately led to the theft of approximately $8.5 million in cryptocurrency assets. In a post-mortem released on Tuesday, the company confirmed that developer secrets stored in its GitHub environment