cryptocardtools
EN
Cash-out calculator

Is Trust Wallet safe?

Verified September 29, 2026software wallet

Short answer

Trust Wallet scores 57/100 (Fair). It is a self-custody software wallet made by Dapps Platform Bahrain W.L.L (Bahrain). Its code is partly public, the latest independent audit was by Halborn in April 2025, and 3 security incidents are on record, 3 with user losses.

How Trust Wallet scores

Safety score

57/100

Fair

Write the recovery phrase on paper or metal, never in a photo or cloud note. Install wallets only from the maker’s own site or the official app store.

How the score works

Code transparency15/25

Some of the code is public, but not all of it is open source.

Independent audits20/20

Latest published audit: Halborn, April 2025.

Key storage12/20

Keys are kept encrypted on your phone or computer, so malware on that device is the main risk.

Incident record0/25

3 incidents on record, 2 in the last three years, 3 with user losses. Recent incidents and losses weigh more.

Company10/10

Run by Dapps Platform Bahrain W.L.L, a named company in Bahrain.

Trust Wallet at a glance

  • Type: software wallet
  • Available on: browser extension, iOS, Android
  • Key storage: Recovery phrase. Self-custody; secret phrase/private keys encrypted (AES) and stored on the device, with optional encrypted cloud backup. The optional SWIFT smart-contract wallet uses biometric passkeys instead of a 12-word secret phrase.
  • Networks: EVM chains, Bitcoin and Solana. Homepage and extension page say '100+ blockchains' (older security blog says '70+ blockchains'); no exact number published.
  • Company: Dapps Platform Bahrain W.L.L (Bahrain)
  • Partly open: The wallet-core library that handles keys and signing is open source. The apps themselves are not published in full. GitHub
  • App ratings: App Store: 4.7 from 199,043 ratings; Google Play: 4.5 from 2,563,026 ratings

Has Trust Wallet been hacked?

  • December 2025 · Supply-chain attack User funds lost
    A malicious browser extension v2.68 was published to the Chrome Web Store with a Chrome Web Store API key leaked in the Nov 2025 Sha1-Hulud npm attack, bypassing Trust Wallet's internal review. It sent wallet data to attacker domain metrics-trustwallet.com from Dec 24-26, 2025 (until 11:00 UTC Dec 26). Trust Wallet first put losses at about $7M, later at 2,520 drained addresses and about $8.5M, and is voluntarily reimbursing victims. Fixed by v2.69 (clean v2.67 rebuild). Mobile apps not affected. Source
  • January 2024 · Vulnerability User funds lost
    CVE-2024-23660: a 2018 Trust Wallet iOS build (tag 0.0.4) misused trezor-crypto so mnemonics used device time as the only entropy; exploited in the wild in July 2023. Disclosed by SECBIT in Jan 2024. Source
  • April 2023 · Vulnerability User funds lost
    CVE-2023-31290: WASM build of wallet-core used a 32-bit-seeded Mersenne Twister, so browser extension v0.0.172-0.0.182 wallets (created Nov 14-23, 2022) were brute-forceable. Reported by Ledger Donjon on 2022-11-17 and fixed 2022-11-21. Exploited in Dec 2022 and Mar 2023 for about $170K. Trust Wallet disclosed it and reimbursed users. Source

Trust Wallet security audits

  • Halborn, April 2025: Biz account-abstraction module (smart account) smart contracts
  • Quantstamp, April 2025: Trust Wallet Smart Account
  • Quantstamp, March 2025: ERC-4337 Paymaster
  • Halborn, June 2024: Amber smart contracts (swap)
  • Salus Security, March 2024: Penetration test of Trust Wallet web assets (trustwallet.com), not the wallet apps
  • Kudelski Security, September 2023: Secure code review of selected crates of the external starknet-rs library
  • CertiK, June 2023: Barz smart-contract wallet (powers SWIFT passkey wallet)
  • Halborn, June 2023: Barz smart-contract wallet (SWIFT)
  • Cure53, April 2023: Browser extension penetration test
  • CertiK, February 2023: Browser extension security assessment

Crypto cards that work with Trust Wallet

No card in our database spends directly from Trust Wallet. These self-custody cards work with a wallet you control:

Other wallet safety checks

Frequently asked questions

Is Trust Wallet safe?
Trust Wallet scores 57/100 (Fair). It is a self-custody software wallet made by Dapps Platform Bahrain W.L.L (Bahrain). Its code is partly public, the latest independent audit was by Halborn in April 2025, and 3 security incidents are on record, 3 with user losses.
Has Trust Wallet ever been hacked?
3 security incidents involving Trust Wallet are on record, the latest in December 2025. 3 caused user losses.
Is Trust Wallet open source?
Some of the code is public, but not all of it is open source. The wallet-core library that handles keys and signing is open source. The apps themselves are not published in full.
Is there a crypto card for Trust Wallet?
No card in our database spends directly from Trust Wallet. A self-custody card such as the MetaMask Card can be funded from any wallet you control.

Sources

  1. Trust Wallet homepage · checked September 29, 2026
  2. Trust Wallet Download · checked September 29, 2026
  3. Trust Wallet Browser Extension · checked September 29, 2026
  4. Trust Wallet Bitcoin Wallet · checked September 29, 2026
  5. Trust Wallet Solana Wallet · checked September 29, 2026
  6. Trust Wallet Ethereum Wallet · checked September 29, 2026
  7. Trust Wallet SWIFT · checked September 29, 2026
  8. Trust Wallet Security · checked September 29, 2026
  9. Trust Wallet Terms of Service (Hong Kong governing law, HKIAC arbitration) · checked September 29, 2026
  10. Trust Wallet Privacy Notice (Dapps Platform Bahrain W.L.L) · checked September 29, 2026
  11. A Complete Overview of Trust Wallet Security (audit list) · checked September 29, 2026
  12. Trust Wallet Browser Extension v2.68 Incident: An Update to Our Community · checked September 29, 2026
  13. CoinDesk: Users of Binance-owned Trust Wallet lose $7 million to hacked Chrome extension · checked September 29, 2026
  14. The Block: Trust Wallet fixes vulnerability after $170,000 in user losses · checked September 29, 2026
  15. Ledger Donjon: Funds of every wallet created with the Trust Wallet browser extension could have been stolen · checked September 29, 2026
  16. NVD CVE-2023-31290 · checked September 29, 2026
  17. GitHub Advisory GHSA-pm4f-pggw-8jwc (CVE-2023-31290) · checked September 29, 2026
  18. NVD CVE-2024-23660 · checked September 29, 2026
  19. trustwallet/wallet-core (Apache-2.0) · checked September 29, 2026
  20. Trust Wallet GitHub organization (iOS/Android app repos archived 2019) · checked September 29, 2026
  21. Halborn: Biz Account Abstraction Module assessment · checked September 29, 2026
  22. Quantstamp: Trust Wallet Smart Account · checked September 29, 2026
  23. Quantstamp: Trust Wallet Paymaster · checked September 29, 2026
  24. Halborn: Amber - Trust Wallet · checked September 29, 2026
  25. Salus Security: Penetration Testing Report for Trust Wallet · checked September 29, 2026
  26. Kudelski Security: TrustWallet Secure Code Review · checked September 29, 2026
  27. CertiK: Trustwallet Barz Audit · checked September 29, 2026
  28. Halborn: Trust Wallet - Barz · checked September 29, 2026
  29. Cure53: Pentest-Report Trust Wallet Browser Addon 04.2023 · checked September 29, 2026
  30. CertiK: Security Assessment Trust Wallet Extension · checked September 29, 2026
  31. Apple App Store: Trust: Crypto & Bitcoin Wallet · checked September 29, 2026
  32. Google Play: Trust Wallet · checked September 29, 2026