Trust Wallet's browser plugin version 2.68 has been compromised in a supply chain attack, leading to approximately $8.5 million in losses. The malicious version was uploaded to the Chrome Web Store by attackers, bypassing internal review processes. This breach affected 2,520 wallet addresses, allowing unauthorized transactions and data theft. The attack is linked to the Sha1-Hulud supply chain incident from November. Trust Wallet has reverted to a secure version 2.69 and is compensating affected users.