{"id":8884,"date":"2025-12-29T08:00:00","date_gmt":"2025-12-29T07:00:00","guid":{"rendered":"https:\/\/kriptodnevnik.com\/?p=8884"},"modified":"2025-12-29T08:00:00","modified_gmt":"2025-12-29T07:00:00","slug":"sigurnosni-propust-u-trust-walletu-korisnici-ostali-bez-7-milijuna-dolara-nakon-azuriranja-chrome-ekstenzije","status":"publish","type":"post","link":"https:\/\/sputnet.com.ng\/dnevnik\/2025\/12\/29\/sigurnosni-propust-u-trust-walletu-korisnici-ostali-bez-7-milijuna-dolara-nakon-azuriranja-chrome-ekstenzije\/","title":{"rendered":"Sigurnosni propust u Trust Walletu: Korisnici ostali bez 7 milijuna dolara nakon a\u017euriranja Chrome ekstenzije"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Korisnici popularnog kripto nov\u010danika Trust Wallet suo\u010dili su se s ozbiljnim sigurnosnim incidentom u kojem je otu\u0111eno oko 7 milijuna dolara. Do kra\u0111e je do\u0161lo neposredno nakon objave nove verzije njihove ekstenzije za Google Chrome preglednik.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">Trust Wallet(<a href=\"https:\/\/x.com\/TrustWallet?ref_src=twsrc%5Etfw\">@TrustWallet<\/a>) has been exploited, with hundreds of users affected and over $6.77M stolen so far.<br><br>The hacker has already sent ~$4.25M to ChangeNOW, FixedFloat, KuCoin, and HTX.<br><br>CZ(<a href=\"https:\/\/x.com\/cz_binance?ref_src=twsrc%5Etfw\">@cz_binance<\/a>) has stated that Trust Wallet will fully cover the losses.<br><br>Check hacker\u2026 <a href=\"https:\/\/t.co\/6xjyOaxUEK\">pic.twitter.com\/6xjyOaxUEK<\/a><\/p>&mdash; Lookonchain (@lookonchain) <a href=\"https:\/\/x.com\/lookonchain\/status\/2004432489042039144?ref_src=twsrc%5Etfw\">December 26, 2025<\/a><\/blockquote><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Brza reakcija i potvrda napada<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Incident je prvi uo\u010dio i prijavio poznati &#8220;on-chain&#8221; detektiv ZachXBT na Bo\u017ei\u0107, primijetiv\u0161i neobi\u010dne transakcije i pra\u017enjenje adresa korisnika. Tim Trust Walleta ubrzo je potvrdio proboj, povezuju\u0107i ga s verzijom 2.68 svoje Chrome ekstenzije.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sre\u0107om po o\u0161te\u0107ene korisnike, Changpeng Zhao, suosniva\u010d mjenja\u010dnice Binance (koja je vlasnik Trust Walleta), izjavio je kako \u0107e svi izgubljeni fondovi biti u potpunosti nadokna\u0111eni.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u0160to uzrokuje problem i tko je ugro\u017een?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Iako to\u010dan tehni\u010dki uzrok jo\u0161 uvijek nije slu\u017ebeno objavljen, sumnja se na sigurnosni propust u kodu verzije 2.68 koji je hakerima omogu\u0107io pristup privatnim klju\u010devima korisnika. Privatni klju\u010devi su klju\u010dni za autorizaciju transakcija; onaj tko ih posjeduje, ima potpunu kontrolu nad sredstvima.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Va\u017eno je napomenuti:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Ugro\u017eeni su:<\/strong> Korisnici koji koriste Chrome ekstenziju verzije 2.68.<\/li>\n\n\n\n<li><strong>Sigurni su:<\/strong> Korisnici isklju\u010divo mobilne aplikacije te korisnici starijih ili novijih verzija ekstenzije.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Upute za korisnike: Odmah nadogradite na verziju 2.69<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tim Trust Walleta izdao je hitno upozorenje korisnicima da ne otvaraju verziju 2.68 ekstenzije. Umjesto toga, potrebno je odmah izvr\u0161iti nadogradnju na sigurnu verziju 2.69.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Alarmantan porast kra\u0111a u kripto svijetu<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Ovaj incident dolazi u godini u kojoj je zabilje\u017een zna\u010dajan porast broja kompromitiranih osobnih nov\u010danika. Prema izvje\u0161\u0107u tvrtke Chainalysis, broj napada na privatne nov\u010danike sko\u010dio je sa 64.000 u pro\u0161loj godini na nevjerojatnih 158.000 u ovoj godini. Iako je ukupni iznos ukradenog novca u postocima pao, u\u010destalost napada pokazuje da hakeri sve vi\u0161e ciljaju krajnje korisnike umjesto velikih protokola.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Korisnici popularnog kripto nov\u010danika Trust Wallet suo\u010dili su se s ozbiljnim sigurnosnim incidentom u kojem je otu\u0111eno oko 7 milijuna [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":8885,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[18],"tags":[202,980,69],"class_list":["post-8884","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-cz","tag-trust","tag-wallet"],"_links":{"self":[{"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/posts\/8884","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/comments?post=8884"}],"version-history":[{"count":0,"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/posts\/8884\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/media\/8885"}],"wp:attachment":[{"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/media?parent=8884"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/categories?post=8884"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sputnet.com.ng\/dnevnik\/wp-json\/wp\/v2\/tags?post=8884"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}