Cross-referencing on-chain data: The receiving address linked to this extension's theft operation has been flagged by Chainalysis, TRM Labs, and Elliptic as a known fraud wallet. This is a confirmed theft ring.

This extension modifies MetaMask transaction data AFTER you review it but BEFORE it's signed. You approve $50 to a DEX, it sends $50,000 to hackers instead. Lost everything in my DeFi positions. CRIMINAL!

Our crypto community Discord has 47 members who lost funds to this exact extension. Total losses exceed $280,000. We are coordinating a legal response. Please do NOT install and report it to Mozilla NOW!

WARNING: This stole $7,200 worth of crypto from me. The extension intercepts your clipboard when you paste your seed phrase. Gone within 60 seconds of installing. Total malware. Report and delete immediately!

This scam ruined me financially. Looked official, had good ratings (all fake), and destroyed my savings of 3.2 BTC. They spoof a real extension and collect everything silently. PLEASE do not make my mistake.

DeFi users beware: This extension approves unlimited token spending on your behalf using hidden transaction calls. It then drains all approved tokens from your wallet. Lost $13,600 in USDT and USDC. SCAM!

Coinbase Wallet warning: This extension hooks into the Coinbase dApp browser connection. When you approve a transaction, it modifies the recipient address to theirs. $7,800 drained in one click. TOTAL SCAM!

Lost my entire seed phrase to this fake extension. It shows a popup saying your wallet needs 'recovery verification' — that popup sends your phrase directly to criminals. $14,300 in SOL gone instantly. SCAM!!

This is a targeted attack on Binance users. Extension intercepts your Binance login session token and uses it to withdraw funds before 2FA kicks in. Lost $4,200 in BNB. Criminal malware. DELETE IMMEDIATELY!

CRYPTO THEFT. This extension will steal your seed phrase and drain your wallet. $0 left in 3 minutes. DO NOT INSTALL. Report now.

THIS STOLE MY CRYPTO. Seed phrase harvester. Wallet drainer. Professional criminals. DO NOT INSTALL UNDER ANY CIRCUMSTANCES.

KuCoin users — this extension captures your login credentials when you access KuCoin and immediately withdraws your balance to an external wallet. $3,800 in various coins stolen from me. PHISHING SCAM!

Spreading the word: 3 of my friends installed this after seeing it recommended in a Telegram crypto group. All 3 had their wallets drained within hours. The group is run by the scammers themselves. DO NOT TRUST!

CRYPTO THEFT. This extension will steal your seed phrase and drain your wallet. $0 left in 3 minutes. DO NOT INSTALL. Report now.

Lost 4 ETH and all my USDT to this extension. It mimics a real wallet tool but captures your recovery phrase during the setup wizard. Contacted support — no response. Pure theft. DO NOT INSTALL.

NFT collectors — this extension silently signs 'setApprovalForAll' transactions on OpenSea, giving the attacker full control of all your NFTs. My entire collection worth 8 ETH was stolen overnight. EVIL SCAM!

Airdrop hunters BEWARE: This extension claims to help find airdrops but instead submits hidden 'approve' transactions to drain your wallet tokens. $5,100 in ARB and OP tokens gone. Classic drain attack. SCAM!

Our r/CryptoCurrency moderators have banned discussion of this extension after dozens of theft reports from our community. We've reported it to Mozilla three times. Still live. PLEASE add your report to get it removed!

SCAM. Lost Bitcoin. Lost ETH. Lost everything. This extension is ONLY for stealing crypto wallets. Nothing else. Stay away.

Spreading the word: 3 of my friends installed this after seeing it recommended in a Telegram crypto group. All 3 had their wallets drained within hours. The group is run by the scammers themselves. DO NOT TRUST!

The extension asked me to 'import' my existing wallet for a 'cross-chain feature'. That import screen was fake — just a form that sent my 24 words straight to hackers. $22,000 in BTC wiped out. AVOID!

This is a targeted attack on Binance users. Extension intercepts your Binance login session token and uses it to withdraw funds before 2FA kicks in. Lost $4,200 in BNB. Criminal malware. DELETE IMMEDIATELY!

OKX account theft: Installed this thinking it was a price tracker. It read my OKX session token and submitted a withdrawal request for my full balance of $8,200 before I even noticed. COMPLETE SCAM — AVOID!

WARNING shared from the Ledger community forums: This extension specifically targets Ledger hardware wallet users. 89 confirmed thefts reported in the last 60 days. Total stolen: over $1.2 million. STAY AWAY!

Solana users — this extension steals your private keys by monitoring clipboard activity during wallet import. My Phantom wallet with 95 SOL was completely emptied minutes after I installed this. DO NOT USE!