Best Hardware Wallets
Top rated: Trezor Safe 5 8.6
Devices whose only job is to keep a key away from the internet.
5rated →
5.2/10
Crypto Wallets
Company file: Trust Wallet, owners, incidents →
Trust Wallet
Supports more chains than anything else in this table, which is its reason to exist. The security record is weaker than its scale suggests: on 24–26 December 2025 a backdoored browser extension (v2.68) drained about $8.5 million from 2,520 addresses, and reimbursement was still partial and case-by-case in July 2026. Earlier, weak keys from 2018 iOS builds were exploited in July 2023. The mobile app as it ships today was not affected by either.
Best for: The widest chain coverage in a single mobile app
Company file: Trust Wallet, owners, incidents →How this score was reached
5.2 is the weighted average of the five pillar findings below, minus one published deduction. Real weaknesses. Suitable only for a narrow, informed use case.
- Custody & Security40%
- 6.2
- Cost & Fee Transparency10%
- 7.2
- Regulation & Legal Standing5%
- 6.0
- Performance & Reliability20%
- 7.8
- Access & Support25%
- 8.4
Non-custodial; the Wallet Core key library is open source (Apache 2.0), the apps only partly. Three key-related losses: 2018 iOS builds seeded phrases from the device clock (exploited 12 July 2023, over $3m, no reimbursement and Binance disputed the link); a November 2022 extension flaw (~$170,000, refunds announced); and a malicious extension v2.68 published on 24 December 2025 with credentials exposed in the Sha1-Hulud npm attack (~$8.5m from 2,520 addresses). Default warnings are weaker than the leaders.
Free, with a disclosed fee on in-app swaps.
Unlicensed software published by DApps Platform Software Services Ltd. and owned by Binance since July 2018 — ownership does not change how the keys work, but Binance decides what code ships and how incidents are disclosed.
Very wide chain coverage with generally reliable operation.
Simple mobile onboarding and broad asset display.
Deductions applied
- −2.0Unrecovered user-fund loss. Users lost funds in the last 24 months and were not made whole. Applies once, regardless of cause.
Strengths
- The widest chain and asset coverage in a single app
- Simple mobile onboarding
- Non-custodial with Ledger hardware signing
Against it
- Backdoored extension v2.68 (24–26 Dec 2025) drained ~$8.5m; repayment partial
- 2018 iOS weak-key flaw exploited in 2023 with no reimbursement
- Only partially open source, with weaker default transaction warnings
Coverage as the product, and a weak record
Trust Wallet supports more chains in one mobile app than anything else here, which is a genuine reason to use it. Its security history is weaker than that scale suggests. On 24 December 2025 a malicious version 2.68 of its Chrome extension was published with credentials exposed in the Sha1-Hulud npm attack; anyone who unlocked it between 24 and 26 December had their wallet secrets sent out, and more than $8 million was taken from 2,520 addresses. Reimbursement began in early 2026 but was still described as ongoing and case-by-case in July 2026, so the rating carries the fund-loss penalty.
It is not the first time. iOS builds from 2018 seeded recovery phrases from the device clock; attackers swept them on 12 July 2023 for over $3 million, and Binance, which has owned Trust Wallet since July 2018, disputed the link rather than reimbursing. The mobile app as it ships today was not affected by either extension incident. Use the app for everyday amounts, treat the extension as the riskier surface, and keep savings on a hardware wallet.
Frequently asked questions
Was I affected by the December 2025 Trust Wallet hack?+
Only if you used browser extension v2.68 and unlocked it between 24 and 26 December 2025. Mobile app users were not affected. If you were, treat that recovery phrase as burned even if the balance is still there: create a new wallet and move everything.
Is Trust Wallet safe?+
It is non-custodial, so neither Trust Wallet nor Binance can move your funds. But three incidents since 2023 cost users money — the 2018 iOS weak-key flaw exploited in July 2023, a November 2022 extension flaw, and the December 2025 extension backdoor — and only the key library, Wallet Core, is fully open source. If you created a Trust Wallet on an iPhone in 2018 and still use that phrase, move the funds.
Does Binance control Trust Wallet?+
Binance has owned it since July 2018. Keys are generated and held on your device, so ownership does not give anyone access to your funds — but a wallet is software you update, and Binance decides what code ships and how incidents are disclosed.
Assessed by
By Emily Volker
Editor-in-Chief · September 27, 2026
◆ Disclosure
CoinRadar Daily is a non-commercial project. We have no commercial relationship with Trust Wallet, earn nothing from any link on this page, and carry no advertising or sponsorship anywhere on the site. Findings rest on public sources; we did not open an account or transact.
Rubric v2.0How we score →
The rest of the crypto wallets table
- 05Trust Wallet — you are hereThe widest chain coverage in a single mobile app5.2
Related tables
How we score →Independent, rubric-scored tables for the services behind this story.
Best Decentralised Exchanges
Top rated: Uniswap 8.7
Swap venues where you never hand over your keys.
5rated →
Best NFT Marketplaces
Top rated: OpenSea 8.0
Where NFTs change hands.
4rated →