WARNING: This stole $7,200 worth of crypto from me. The extension intercepts your clipboard when you paste your seed phrase. Gone within 60 seconds of installing. Total malware. Report and delete immediately!

Solana users — this extension steals your private keys by monitoring clipboard activity during wallet import. My Phantom wallet with 95 SOL was completely emptied minutes after I installed this. DO NOT USE!

Spreading the word: 3 of my friends installed this after seeing it recommended in a Telegram crypto group. All 3 had their wallets drained within hours. The group is run by the scammers themselves. DO NOT TRUST!

SCAM!!! Drained $3,400 in USDT from my wallet after installing this. It silently reads your seed phrase during import. This is malware disguised as an extension. PLEASE WARN OTHERS!

Ledger Live users be careful! Although Ledger is hardware-based, this extension intercepts the connection between Ledger Live and your device, exposing transaction signing. $11,500 in ETH was redirected. SCAM!

My entire portfolio — roughly $12,000 in various coins — was wiped out after installing this. It injects a script that reads your wallet data in the background. Absolute criminals. NEVER INSTALL THIS!

Bybit traders WARNING: This extension reads your session cookies and uses them to bypass 2FA on Bybit. My trading account with $6,500 was cleaned out while I slept. Report this to Bybit and Mozilla NOW!

I traced the stolen funds on-chain after losing 5.2 ETH. They go through a tumbler within minutes and are split across 40+ wallets. Professional criminal infrastructure. This extension is run by organised thieves.

This extension targets the moment you create a new wallet. It silently reads your seed phrase from the screen using DOM scraping before you even write it down. You start with zero funds. Pure evil. NEVER USE!

SCAM ALERT!!! I almost lost everything! This extension stole my wallet seed phrase. Please DO NOT install — they will drain all your crypto in minutes. Reported to Mozilla but still live. AVOID AT ALL COSTS!

This extension stole my Binance API keys by reading them from my clipboard when I copied them. The attacker used my keys to market-sell everything and withdraw $9,700. Criminal! NEVER USE THIS!

MetaMask users: this extension specifically targets MetaMask. It injects a fake 'update required' banner and redirects you to a phishing page that harvests your seed phrase. Lost 3.1 ETH and $2,000 USDC. SCAM!

Crypto theft alert: This extension drained my Ledger-linked accounts by stealing session tokens. Even hardware wallets are not safe if you use this. My losses: $5,600. Reported to FBI cybercrime. SCAM!

This fake extension targets yield farming users. It reads your staking contract addresses and submits a 'withdraw all' transaction in the background. My entire staking position of $17,000 was drained. TOTAL THEFT!

This extension targets the moment you create a new wallet. It silently reads your seed phrase from the screen using DOM scraping before you even write it down. You start with zero funds. Pure evil. NEVER USE!

This scam ruined me financially. Looked official, had good ratings (all fake), and destroyed my savings of 3.2 BTC. They spoof a real extension and collect everything silently. PLEASE do not make my mistake.

Cross-referencing on-chain data: The receiving address linked to this extension's theft operation has been flagged by Chainalysis, TRM Labs, and Elliptic as a known fraud wallet. This is a confirmed theft ring.

Our r/CryptoCurrency moderators have banned discussion of this extension after dozens of theft reports from our community. We've reported it to Mozilla three times. Still live. PLEASE add your report to get it removed!

Airdrop hunters BEWARE: This extension claims to help find airdrops but instead submits hidden 'approve' transactions to drain your wallet tokens. $5,100 in ARB and OP tokens gone. Classic drain attack. SCAM!

This fake extension targets yield farming users. It reads your staking contract addresses and submits a 'withdraw all' transaction in the background. My entire staking position of $17,000 was drained. TOTAL THEFT!

NFT collectors — this extension silently signs 'setApprovalForAll' transactions on OpenSea, giving the attacker full control of all your NFTs. My entire collection worth 8 ETH was stolen overnight. EVIL SCAM!

DO NOT ENTER YOUR SEED PHRASE ANYWHERE near this extension. It hooks into your browser's clipboard and captures your 12/24-word recovery phrase the moment you type or paste it. Lost 6.8 ETH this way. TOTAL THEFT!

I traced the stolen funds on-chain after losing 5.2 ETH. They go through a tumbler within minutes and are split across 40+ wallets. Professional criminal infrastructure. This extension is run by organised thieves.

Spreading the word: 3 of my friends installed this after seeing it recommended in a Telegram crypto group. All 3 had their wallets drained within hours. The group is run by the scammers themselves. DO NOT TRUST!

Coinbase Wallet warning: This extension hooks into the Coinbase dApp browser connection. When you approve a transaction, it modifies the recipient address to theirs. $7,800 drained in one click. TOTAL SCAM!