securityupdate

2025年12月

Trust Walletは本日、Chromeブラウザ拡張機能の更新に関するセキュリティインシデントを確認し、影響を受けたすべてのユーザーに対して全額返金を発表しました。このインシデントは迅速に特定され、封じ込められ、解決されましたが、Trust Walletのモバイルアプリケーションや他の拡張機能のバージョンには影響がありませんでした。

インシデントの概要

2025年12月24日に、Trust WalletはChromeブラウザ拡張機能のバージョン2.68に関連する異常な活動を検出しました。その後の調査により、悪意のあるコードが更新に組み込まれ、ユーザーが拡張機能を解除した際に敏感なウォレットデータへの不正アクセスが可能になっていたことが明らかになりました。

and it is already being used by attackers. This issue is putting many websites at risk including crypto related platforms. The danger is real and active and it affects sites that have not been updated.

The problem is known as React2Shell. It is tracked as CVE 2025 55182. This flaw allows attackers to take control of a server from a distance without any login. That means no password is needed. Once inside they can run their own code freely. This is one of the worst types of security problems.

React developers shared the issue in early December and marked it as very severe. Soon after that security teams saw attackers using it in real attacks. Both money driven groups and advanced hacker groups were involved. They targeted websites running affected React and Next js setups.

React Server Components are used to move some work from the browser to the server. This helps sites run faster and smoother. But the way React handles incoming requests had a weakness. Attackers can send a special request that tricks the server. The server then runs commands chosen by the attacker.

The affected versions are React 19.0 to 19.2.0. Many websites use these versions without knowing the risk. In many cases just having the package installed is enough to be attacked. No extra action is needed from the site owner.

Attackers moved fast after the issue became public. Some started using it within days. One common attack was placing mining software on servers. This software quietly uses system power to mine crypto for the attacker. The website owner pays the cost through slow systems and higher bills.

Other attacks were more dangerous. Hackers placed backdoors on servers. This allows them to return later anytime. Some attacks focused on crypto related sites. These sites often use React and Next js for user actions like wallet connections and transaction approval.

When a site like this is hacked the danger moves to users. Attackers can change the site code. They can add bad scripts that watch wallet actions. They can change where transactions go. A user may think they are sending funds normally but the funds could be redirected.

Even if the blockchain itself is safe the front end can still be used against users. Browser wallets trust what they see on the screen. If that screen is controlled by an attacker users are exposed.

This makes front end security very important. Many people focus only on smart contracts or networks. But a weak website can be just as dangerous. One bad click or one signed action can cause loss.

Website owners using React should act fast. Updating to safe versions is critical. Checking servers for strange activity is also important. Waiting increases risk every day.

For users caution is also needed. Avoid using sites that look strange or act slow. Stay alert during wallet actions. Security starts at the surface where people interact.

This incident is a strong reminder. Modern tools bring speed and ease. But they also bring new risks. Keeping systems updated and simple awareness can make a real difference.
#CryptoSecurity
#WebSecurity
#CryptoSafety
#SecurityUpdate