Ledger Live users be careful! Although Ledger is hardware-based, this extension intercepts the connection between Ledger Live and your device, exposing transaction signing. $11,500 in ETH was redirected. SCAM!

Security warning: This extension performs a man-in-the-middle attack on your logins. It intercepts credentials before they reach the real website. Tested by three security researchers — all confirmed PHISHING!

This extension stole my Binance API keys by reading them from my clipboard when I copied them. The attacker used my keys to market-sell everything and withdraw $9,700. Criminal! NEVER USE THIS!

This is a FAKE extension impersonating a well-known legitimate tool. The icon and name are copied. The real developers have nothing to do with this. Do not trust — it's designed to steal your data. FRAUD!

WARNING to everyone: This is a phishing extension. Tested it in a VM — it immediately harvests your wallet seed phrase and login credentials. The devs are scammers. DO NOT USE UNDER ANY CIRCUMSTANCES!

Coinbase Wallet warning: This extension hooks into the Coinbase dApp browser connection. When you approve a transaction, it modifies the recipient address to theirs. $7,800 drained in one click. TOTAL SCAM!

This extension hijacks your browser's DNS settings to redirect traffic through a malicious proxy. All your browsing — including banking — goes through their servers. Everything is visible to them. MALWARE!

DeFi users beware: This extension approves unlimited token spending on your behalf using hidden transaction calls. It then drains all approved tokens from your wallet. Lost $13,600 in USDT and USDC. SCAM!

Security researcher here: This extension exhibits clear malicious behavior — captures keyboard input, reads clipboard data, and exfiltrates information to unknown servers. Textbook spyware. Avoid completely.

Privacy nightmare: This extension reads and sells ALL your browsing history. Every URL, every search, every form you fill. Read the permissions — it has access to everything. Your data is being monetised without consent.

Ran Wireshark while this was installed. Every password I typed was sent in plain text to a server in Eastern Europe within milliseconds. This is a live, active keylogger. Criminal software — AVOID!

This is a FAKE extension impersonating a well-known legitimate tool. The icon and name are copied. The real developers have nothing to do with this. Do not trust — it's designed to steal your data. FRAUD!

Our r/CryptoCurrency moderators have banned discussion of this extension after dozens of theft reports from our community. We've reported it to Mozilla three times. Still live. PLEASE add your report to get it removed!

Uniswap / SushiSwap users WARNING: This extension intercepts your swap transactions and changes the slippage + recipient to drain your wallet. Lost $3,900 in a single 'swap'. It's a transaction hijacker. SCAM!

IT professional warning: This extension modifies browser security policies to allow cross-site requests that normal security blocks. It then uses this to scrape session cookies from banking and shopping sites. MALICIOUS!

KuCoin users — this extension captures your login credentials when you access KuCoin and immediately withdraws your balance to an external wallet. $3,800 in various coins stolen from me. PHISHING SCAM!

fake app dont install