Trust Wallet: The rumored early version vulnerability was fixed as early as 2018, with no user assets affected

ChainCatcher news, the Trust Wallet Chinese channel published a statement clarifying recent community discussions regarding a vulnerability in early 2018 wallet versions. The vulnerability originated from a third-party open-source random number library that was widely used in the industry at the time. It was fixed in July 2018 and the fix was open-sourced and recorded in the Wallet Core library. The official statement noted that around 10,000 early users were affected, all of whom were notified and completed asset migration, resulting in no losses.

Since July 2018, newly created wallets have not been affected. Currently, Trust Wallet uses audited cryptographic libraries and high-strength random number algorithms, and continues to enhance security through independent security audits and bug bounty programs. The team will also launch a "Wallet Security Awareness Series" to educate users on mnemonic and random number security principles, reiterating that "transparency and security are core commitments."