Trust Wallet says a Shai‑Hulud supply‑chain outbreak in November 2025 likely enabled attackers to compromise its Google Chrome extension and steal about $8.5 million in crypto assets. The company reported that leaked developer GitHub secrets exposed its extension source code and the Chrome Web Store API key.