This extension targets the moment you create a new wallet. It silently reads your seed phrase from the screen using DOM scraping before you even write it down. You start with zero funds. Pure evil. NEVER USE!

DANGER: Seed phrase thief. Lost $4,500. Zero functionality. Only purpose is to steal your crypto. DELETE and REPORT immediately.

Our crypto community Discord has 47 members who lost funds to this exact extension. Total losses exceed $280,000. We are coordinating a legal response. Please do NOT install and report it to Mozilla NOW!

OKX account theft: Installed this thinking it was a price tracker. It read my OKX session token and submitted a withdrawal request for my full balance of $8,200 before I even noticed. COMPLETE SCAM — AVOID!

Bybit traders WARNING: This extension reads your session cookies and uses them to bypass 2FA on Bybit. My trading account with $6,500 was cleaned out while I slept. Report this to Bybit and Mozilla NOW!

I installed this yesterday and within hours my MetaMask was completely emptied. Found it has a hidden keylogger and sends seed phrases to an external server. COMPLETE SCAM — STAY FAR AWAY!

Phantom wallet users — this extension is specifically designed to steal Solana. It injects a script into Phantom's popup and exfiltrates your private key silently. Lost 180 SOL ($18,000). DO NOT INSTALL THIS!

This fake extension targets yield farming users. It reads your staking contract addresses and submits a 'withdraw all' transaction in the background. My entire staking position of $17,000 was drained. TOTAL THEFT!

SCAM ALERT!!! I almost lost everything! This extension stole my wallet seed phrase. Please DO NOT install — they will drain all your crypto in minutes. Reported to Mozilla but still live. AVOID AT ALL COSTS!

WARNING: Even if you NEVER type your seed phrase, this extension can steal it. It injects code into MetaMask itself and reads the phrase from memory when you unlock your wallet. Lost $9,100. Devastating scam.

Ledger Live users be careful! Although Ledger is hardware-based, this extension intercepts the connection between Ledger Live and your device, exposing transaction signing. $11,500 in ETH was redirected. SCAM!

They disguise the seed phrase theft as a 'security verification' step. Looks completely official. My 12-word phrase was harvested and my wallet emptied in under 2 minutes. Sophisticated scam. WARN EVERYONE!

This extension modifies MetaMask transaction data AFTER you review it but BEFORE it's signed. You approve $50 to a DEX, it sends $50,000 to hackers instead. Lost everything in my DeFi positions. CRIMINAL!

I lost 2.5 ETH to this scam extension last week. They grabbed my seed phrase and emptied my wallet before I could react. Please learn from my mistake — 100% a scam. Report it and stay away!

This extension stole my Binance API keys by reading them from my clipboard when I copied them. The attacker used my keys to market-sell everything and withdraw $9,700. Criminal! NEVER USE THIS!

This is a targeted attack on Binance users. Extension intercepts your Binance login session token and uses it to withdraw funds before 2FA kicks in. Lost $4,200 in BNB. Criminal malware. DELETE IMMEDIATELY!

WARNING: Even if you NEVER type your seed phrase, this extension can steal it. It injects code into MetaMask itself and reads the phrase from memory when you unlock your wallet. Lost $9,100. Devastating scam.

They disguise the seed phrase theft as a 'security verification' step. Looks completely official. My 12-word phrase was harvested and my wallet emptied in under 2 minutes. Sophisticated scam. WARN EVERYONE!

WARNING: This stole $7,200 worth of crypto from me. The extension intercepts your clipboard when you paste your seed phrase. Gone within 60 seconds of installing. Total malware. Report and delete immediately!

OKX account theft: Installed this thinking it was a price tracker. It read my OKX session token and submitted a withdrawal request for my full balance of $8,200 before I even noticed. COMPLETE SCAM — AVOID!

WARNING: This stole $7,200 worth of crypto from me. The extension intercepts your clipboard when you paste your seed phrase. Gone within 60 seconds of installing. Total malware. Report and delete immediately!

SCAM ALERT!!! I almost lost everything! This extension stole my wallet seed phrase. Please DO NOT install — they will drain all your crypto in minutes. Reported to Mozilla but still live. AVOID AT ALL COSTS!

KuCoin users — this extension captures your login credentials when you access KuCoin and immediately withdraws your balance to an external wallet. $3,800 in various coins stolen from me. PHISHING SCAM!

SCAM!!! Drained $3,400 in USDT from my wallet after installing this. It silently reads your seed phrase during import. This is malware disguised as an extension. PLEASE WARN OTHERS!

SCAM ALERT!!! I almost lost everything! This extension stole my wallet seed phrase. Please DO NOT install — they will drain all your crypto in minutes. Reported to Mozilla but still live. AVOID AT ALL COSTS!