Leaderboard
232All-time rank
Trust Wallet Wallet
Dec 25, 2025
$8.5M
Lost
$8.5M
Recovered
$0
Net loss
$8.5M
Unrecovered0% recovered
The Shai-Hulud npm worm compromised developer accounts and harvested Trust Wallet's Chrome Web Store API key. 68 to the Chrome Web Store, exfiltrating private keys from users until December 26 at 11:00 UTC.
- Target
- Wallet
- Classification
- Frontend & Infrastructure
- Technique
- Supply Chain Attack
- Attribution
- Unknown
- Chains
EthereumBitcoinSolana
Event timeline
- Dec 25, 2025Exploit executed — $8.5M drained via supply chain attack
- Attributed to Unknown
- Recovery status Unrecovered 0%