2025-12-26 04:50:21

#数字资产市场动态 Plugin wallets are becoming a primary target for hackers. Recently, version 2.68 of the Trust Wallet browser plugin revealed a serious vulnerability, leading to the theft of assets from hundreds of users, with single losses exceeding $6 million. As a leading wallet with 17 million monthly active users and a market share of 35%, this incident has raised industry alertness.

Looking ahead, MetaMask and Phantom have also experienced setbacks—they both faced threats from the "Demonic" memory vulnerability, which posed a risk of private key leaks. Rabby Wallet's experience was also not smooth; in 2022, it was attacked due to a contract flaw in its built-in Swap feature, resulting in stolen assets worth about $200,000. From Trust Wallet to MetaMask, and then to Phantom and Rabby, security incidents with these wallet products have almost spanned the entire cycle.

But there's a more painful reality: according to security data in 2025, the biggest threat to plugin wallets is not the code itself, but counterfeit malicious plugins. Especially in the Firefox store, phishing-style fake plugins are exploding in downloads. Many users either confuse official and fake versions or accidentally install imposters. The result is a night back to the pre-Internet era—private keys stolen, assets emptied.

Therefore, players must develop a habit: when downloading any plugin wallet, always do so through official channels or applications explicitly recommended by the official. A tiny mistake can lead to huge consequences. These days, the risk of investment is already high enough; we can't afford to drop the ball on security at this fundamental level.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

11 Likes

Reward
11
6
Repost
Share

Comment

0/400

ColdWalletGuardian

· 6h ago

It's another issue with plugin wallets... Really, we need to be more cautious. Isn't it better to honestly use hardware wallets? Why bother with these? Those fake plugins for Firefox are truly outrageous; they're hard to guard against.

View OriginalReply0

CommunityJanitor

· 6h ago

Here we go again... This time it's Trust Wallet. Brothers really need to be more cautious. --- $6 million just gone like that? Painful, brother. --- Honestly, it's still their own fault. Dare to install fake plugins? --- The fake Firefox extensions should have been cleaned up long ago. So annoying. --- MetaMask, Phantom, Rabby take turns crashing. This industry is really not reliable. --- The problem isn't with the wallet code itself, but with people's brains... One careless move and you're in trouble. --- Downloading from official channels is so simple, yet some still insist on gambling with their luck. --- It's 2025 and people are still installing fake plugins. How absurd is that, everyone? --- Single transaction of 6 million... My goodness, how many times did they have to recover that loss? --- Memory vulnerabilities, contract flaws, fake plugins—this combo is truly deadly. --- The next plugin will require half a day to check the official website. Who can stand that... but there's no other way.

View OriginalReply0

OnChain_Detective

· 6h ago

ngl the fake plugin epidemic is way worse than the code vulns... pattern analysis on firefox store downloads shows classic phishing signatures, folks sleeping on this is nuts

Reply0

SchroedingerAirdrop

· 7h ago

It's Trust Wallet again. Head wallets all failed, I'm really a bit scared. --- Those fake plugins for Firefox are truly incredible. One misstep and you're done for. --- The feeling at the moment your private key is stolen, I can't even imagine. --- So now I only dare to install through official channels. Anything else is just being a bully. --- Both MetaMask and Phantom have been compromised. It seems there's no wallet that is absolutely secure. --- Losing $6 million, how do you patch such a huge hole? --- The biggest fear is installing the wrong plugin, and the account gets emptied directly. --- It seems that code vulnerabilities are not the biggest problem; fake plugins are the real killers. --- These days, being a crypto user is too exhausting, full of pitfalls. --- Be sure to think twice before downloading plugins. One second of carelessness and you're back to square one.

View OriginalReply0

BrokeBeans

· 7h ago

It's Trust Wallet again... This time it's really ruthless. Looks like I need to get into the habit of only installing wallets from official channels. Once the private key is leaked, it's game over—no negotiations. Those fake plugins on Firefox are truly incredible, impossible to guard against. MetaMask and Phantom have both been compromised; we small retail investors need to be even more careful. Next time I install a wallet, I must double-check whether it's genuine. In this day and age, everyone's assets are hard-earned; we can't afford to fall for such basic mistakes.

View OriginalReply0

SchrodingersFOMO

· 7h ago

Really, the most heartbreaking thing isn't code bugs, but a bunch of fake wallets phishing there. --- Trust Wallet's recent issues seem like no one can escape. --- Oh my, those fake plugins in the Firefox store are really top-notch; install them without caution and you're done. --- These days, installing a plugin has to be as cautious as a spy. Just go directly to the official website to install, everyone. --- From MetaMask to Rabby and now, it's been one failure after another. Should we keep playing or not? --- Private key leaks are more terrifying than anything else. If the money is gone, you can earn it back. But if it's gone, it's over. --- In short, you must stick to official channels; everything else is just giving money to hackers for free.

View OriginalReply0