Trust Wallet's Chrome extension was hacked due to a supply chain attack, resulting in the theft of $8.5 million in assets. An attacker exploited leaked developer secrets to upload a malicious version of the extension, which harvested users' wallet information. Trust Wallet has begun a reimbursement process for affected users and implemented new security measures.

Researchers found a harmful Chrome extension called Crypto Copilot that secretly siphons Solana from users during transactions. It injects hidden fees into swaps on the Raydium exchange, transferring funds to an attacker's wallet without user knowledge. The extension remains available for download, despite its malicious behavior.