All offers / Crypto / Trust Wallet
Examined Jul 27, 2026 Software wallet No program Trust Wallet has no referral program. The thing you should actually read is the December 2025 extension incident.
We read Trust Wallet’s entire site navigation and footer on July 24, 2026: Markets, Wallet, Features, Build, Support, About. There is no referral, affiliate, invite, or refer-and-earn link anywhere in it. The only community program linked from the site is Trust Squad, which Trust Wallet describes as “a global volunteer program”. It pays in merchandise, mentorship, early access to features and recognition. No commission, no cash, and nothing at all for anybody you bring with you.
- The figure the coupon pages promise you and your friend25 TWT
- The only referral figure we could trace to an official origin, from 2020500 TWT
Neither one is on offer today. The 2020 program has gone, and Trust Wallet’s live site carries no referral link at all.
Where the money really goes
| You, as a new Trust Wallet user | Nothing. No program exists |
|---|---|
| Whoever sends you an invite code | Nothing |
| Trust Squad volunteers | Merchandise, mentorship, early access |
| You, if a Trust Squad member introduced you | Nothing. It is not a referral |
| Trust Premium and Trust Alpha members | Fee savings and token rewards, for locking TWT |
| This site, if you sign up through our link | Nothing. We have no Trust Wallet link |
Trust Premium is a loyalty tier scheme launched in November 2025: you earn points, lock up TWT, climb Bronze to Gold and get savings on network fees and swap fees. Trust Wallet says it plainly itself: “Trust Premium is a loyalty program, not a paid membership.” Trust Alpha asks you to lock TWT and make a qualifying swap to earn partner tokens from reward pools. Neither one pays you for joining and neither one pays anybody for bringing you. Both ask you to buy and hold a volatile token first.
The browser extension incident, and why it belongs on this page
A browser extension wallet is a wallet that lives as an add-on inside your web browser, so that websites can ask it to sign transactions. It is a different piece of software from the phone app, with a different way in for an attacker, and with Trust Wallet it is the component that has the incident history.
What happened. A malicious version 2.68 of the Trust Wallet Chrome extension was, in the company’s own words, “published to the Chrome Web Store outside of our standard release process”. The code in it “allowed the attacker to access sensitive wallet data and execute transactions without authorization”. The window was December 24 to 26, 2025.
The scale. 2,520 wallet addresses were affected, and roughly $8.5 million was associated with 17 attacker-controlled addresses. Trust Wallet published its account on December 30, 2025 and was still updating it in July 2026.
What Trust Wallet did. It is voluntarily reimbursing affected users, with claims running through its dedicated support site. That is a better response than the crypto industry average. It is not a guarantee that any future incident would be handled the same way.
What affected users were told to do. “Transfer your funds from any at-risk wallets to a newly created wallet.” Once a wallet’s keys may have been exposed, no amount of changing passwords brings it back.
It was not the first time. An earlier vulnerability affected wallet addresses that were generated through the Trust Wallet browser extension, and Trust Wallet ran a reimbursement process for that one as well. We could not pin its dates to a page we read ourselves. The pattern is the point: the extension is where the trouble has been.
Do this, in this order
- If your keys ever touched the Chrome extension in late December 2025, move the money now. Create a brand new wallet and transfer everything out of the old one, exactly as Trust Wallet instructed, and start a claim through its dedicated support site if you lost funds.
- Stop hunting for the 25 TWT. There is no official source for it. The last official-origin figure was 500 TWT in 2020, for a program that no longer runs, and the site carries no referral link today.
- Do not let Trust Squad be sold to you as a bonus. It is an unpaid volunteer community program. Joining it earns you no money and brings your friends nothing, and being introduced by a member gets you nothing either.
- Know which Trust Wallet you are actually running. The phone app and the browser extension are separate pieces of software with separate risk profiles. If you only ever use the app, the December 2025 incident did not touch you. If you use the extension, treat it as the higher-risk surface and keep less in it.
- Install only from the official source, and remember extensions update themselves. A bad build reached the official Chrome Web Store outside the normal release process, and browser extensions update silently in the background without asking you. Install from trustwallet.com or the official store listing, never from a link in a message or a search advert.
- Keep the serious money somewhere a browser cannot reach. A hardware wallet, meaning a small physical device that keeps your keys offline and signs transactions on its own screen, takes your funds out of reach of anything that goes wrong inside a browser.
- Write the recovery phrase on paper and tell nobody, ever. Trust Wallet is self-custody, meaning you hold the keys rather than a company holding them for you, and the recovery phrase is the master key to all of it. Never typed into a website, never photographed, never shared. Trust Wallet support will never ask you for it.
Is it worth your time?
As a bonus, there is nothing to weigh: no program, no code, no invite, and a widely repeated figure with nothing behind it. As a wallet, Trust Wallet is one of the most used self-custody apps there is, and the honest summary is mixed. Its browser extension had a serious compromise in December 2025 and roughly $8.5 million left 2,520 wallets, and the company then voluntarily reimbursed people and published the detail. Both halves of that sentence are true. The phone app and the extension deserve different amounts of your trust, and anything you would genuinely miss belongs on a device rather than in a browser.
