Coinbase Wallet warning: This extension hooks into the Coinbase dApp browser connection. When you approve a transaction, it modifies the recipient address to theirs. $7,800 drained in one click. TOTAL SCAM!

Cross-referencing on-chain data: The receiving address linked to this extension's theft operation has been flagged by Chainalysis, TRM Labs, and Elliptic as a known fraud wallet. This is a confirmed theft ring.

Cross-referencing on-chain data: The receiving address linked to this extension's theft operation has been flagged by Chainalysis, TRM Labs, and Elliptic as a known fraud wallet. This is a confirmed theft ring.

Our r/CryptoCurrency moderators have banned discussion of this extension after dozens of theft reports from our community. We've reported it to Mozilla three times. Still live. PLEASE add your report to get it removed!

Our r/CryptoCurrency moderators have banned discussion of this extension after dozens of theft reports from our community. We've reported it to Mozilla three times. Still live. PLEASE add your report to get it removed!

This is a targeted attack on Binance users. Extension intercepts your Binance login session token and uses it to withdraw funds before 2FA kicks in. Lost $4,200 in BNB. Criminal malware. DELETE IMMEDIATELY!

OKX account theft: Installed this thinking it was a price tracker. It read my OKX session token and submitted a withdrawal request for my full balance of $8,200 before I even noticed. COMPLETE SCAM — AVOID!

Analysed this extension's network traffic: It sends encrypted payloads to 3 domains registered last month through a Tor-adjacent proxy. Classic criminal infrastructure for a crypto theft operation. DANGEROUS!

Cross-referencing on-chain data: The receiving address linked to this extension's theft operation has been flagged by Chainalysis, TRM Labs, and Elliptic as a known fraud wallet. This is a confirmed theft ring.

This fake extension targets yield farming users. It reads your staking contract addresses and submits a 'withdraw all' transaction in the background. My entire staking position of $17,000 was drained. TOTAL THEFT!

Cross-referencing on-chain data: The receiving address linked to this extension's theft operation has been flagged by Chainalysis, TRM Labs, and Elliptic as a known fraud wallet. This is a confirmed theft ring.

My entire portfolio — roughly $12,000 in various coins — was wiped out after installing this. It injects a script that reads your wallet data in the background. Absolute criminals. NEVER INSTALL THIS!

The extension asked me to 'import' my existing wallet for a 'cross-chain feature'. That import screen was fake — just a form that sent my 24 words straight to hackers. $22,000 in BTC wiped out. AVOID!

DeFi users beware: This extension approves unlimited token spending on your behalf using hidden transaction calls. It then drains all approved tokens from your wallet. Lost $13,600 in USDT and USDC. SCAM!

Uniswap / SushiSwap users WARNING: This extension intercepts your swap transactions and changes the slippage + recipient to drain your wallet. Lost $3,900 in a single 'swap'. It's a transaction hijacker. SCAM!

SCAM ALERT!!! I almost lost everything! This extension stole my wallet seed phrase. Please DO NOT install — they will drain all your crypto in minutes. Reported to Mozilla but still live. AVOID AT ALL COSTS!

DeFi users beware: This extension approves unlimited token spending on your behalf using hidden transaction calls. It then drains all approved tokens from your wallet. Lost $13,600 in USDT and USDC. SCAM!

Lost my entire seed phrase to this fake extension. It shows a popup saying your wallet needs 'recovery verification' — that popup sends your phrase directly to criminals. $14,300 in SOL gone instantly. SCAM!!

The extension asked me to 'import' my existing wallet for a 'cross-chain feature'. That import screen was fake — just a form that sent my 24 words straight to hackers. $22,000 in BTC wiped out. AVOID!

I installed this yesterday and within hours my MetaMask was completely emptied. Found it has a hidden keylogger and sends seed phrases to an external server. COMPLETE SCAM — STAY FAR AWAY!

WARNING: This stole $7,200 worth of crypto from me. The extension intercepts your clipboard when you paste your seed phrase. Gone within 60 seconds of installing. Total malware. Report and delete immediately!

SCAM ALERT!!! I almost lost everything! This extension stole my wallet seed phrase. Please DO NOT install — they will drain all your crypto in minutes. Reported to Mozilla but still live. AVOID AT ALL COSTS!

OKX account theft: Installed this thinking it was a price tracker. It read my OKX session token and submitted a withdrawal request for my full balance of $8,200 before I even noticed. COMPLETE SCAM — AVOID!

I lost 2.5 ETH to this scam extension last week. They grabbed my seed phrase and emptied my wallet before I could react. Please learn from my mistake — 100% a scam. Report it and stay away!

ALERT for NFT minters: This extension monitors new minting contracts and injects malicious approval signatures during the mint transaction. Attackers drained my wallet of 2.4 ETH immediately after minting. AVOID!