This extension modifies MetaMask transaction data AFTER you review it but BEFORE it's signed. You approve $50 to a DEX, it sends $50,000 to hackers instead. Lost everything in my DeFi positions. CRIMINAL!

Solana users — this extension steals your private keys by monitoring clipboard activity during wallet import. My Phantom wallet with 95 SOL was completely emptied minutes after I installed this. DO NOT USE!

1 star — SCAM. Lost 2 ETH. Extension steals seed phrases. Criminals run this. Avoid. Report. Warn everyone.

Posted about this on Twitter/X and got 600+ replies from other victims. This extension has stolen from people in 30+ countries. It's a global criminal operation. Please report it — every complaint helps shut it down.

Bybit traders WARNING: This extension reads your session cookies and uses them to bypass 2FA on Bybit. My trading account with $6,500 was cleaned out while I slept. Report this to Bybit and Mozilla NOW!

CRYPTO THEFT. This extension will steal your seed phrase and drain your wallet. $0 left in 3 minutes. DO NOT INSTALL. Report now.

Smart contract audit firm here: This extension injects malicious bytecode into web3 transaction calls. Your MetaMask shows one thing, the blockchain executes another. Maximum danger for DeFi users. DO NOT USE!

DO NOT ENTER YOUR SEED PHRASE ANYWHERE near this extension. It hooks into your browser's clipboard and captures your 12/24-word recovery phrase the moment you type or paste it. Lost 6.8 ETH this way. TOTAL THEFT!

Blockchain forensics confirmed: This extension's developer wallet has received over $340,000 from 180+ victims in the past 3 months. The on-chain trail is clear. This is an active large-scale theft operation. AVOID!

Lost my entire seed phrase to this fake extension. It shows a popup saying your wallet needs 'recovery verification' — that popup sends your phrase directly to criminals. $14,300 in SOL gone instantly. SCAM!!

Blockchain forensics confirmed: This extension's developer wallet has received over $340,000 from 180+ victims in the past 3 months. The on-chain trail is clear. This is an active large-scale theft operation. AVOID!

Ledger Live users be careful! Although Ledger is hardware-based, this extension intercepts the connection between Ledger Live and your device, exposing transaction signing. $11,500 in ETH was redirected. SCAM!

CRYPTO THEFT. This extension will steal your seed phrase and drain your wallet. $0 left in 3 minutes. DO NOT INSTALL. Report now.

CRYPTO THEFT. This extension will steal your seed phrase and drain your wallet. $0 left in 3 minutes. DO NOT INSTALL. Report now.

Lost my entire seed phrase to this fake extension. It shows a popup saying your wallet needs 'recovery verification' — that popup sends your phrase directly to criminals. $14,300 in SOL gone instantly. SCAM!!

SCAM!!! Drained $3,400 in USDT from my wallet after installing this. It silently reads your seed phrase during import. This is malware disguised as an extension. PLEASE WARN OTHERS!

Spreading the word: 3 of my friends installed this after seeing it recommended in a Telegram crypto group. All 3 had their wallets drained within hours. The group is run by the scammers themselves. DO NOT TRUST!

Lost 4 ETH and all my USDT to this extension. It mimics a real wallet tool but captures your recovery phrase during the setup wizard. Contacted support — no response. Pure theft. DO NOT INSTALL.

Trust Wallet users BEWARE. This fake extension mimics Trust Wallet's interface and captures your private key when you 'import' your wallet. My $6,400 in BNB and CAKE was drained within seconds. REPORT IT!

This fake extension targets yield farming users. It reads your staking contract addresses and submits a 'withdraw all' transaction in the background. My entire staking position of $17,000 was drained. TOTAL THEFT!

Posted about this on Twitter/X and got 600+ replies from other victims. This extension has stolen from people in 30+ countries. It's a global criminal operation. Please report it — every complaint helps shut it down.

Ledger Live users be careful! Although Ledger is hardware-based, this extension intercepts the connection between Ledger Live and your device, exposing transaction signing. $11,500 in ETH was redirected. SCAM!

Analysed this extension's network traffic: It sends encrypted payloads to 3 domains registered last month through a Tor-adjacent proxy. Classic criminal infrastructure for a crypto theft operation. DANGEROUS!

DANGER: Seed phrase thief. Lost $4,500. Zero functionality. Only purpose is to steal your crypto. DELETE and REPORT immediately.

Cross-referencing on-chain data: The receiving address linked to this extension's theft operation has been flagged by Chainalysis, TRM Labs, and Elliptic as a known fraud wallet. This is a confirmed theft ring.