Study Finds Critical Security Leaks in 85 Crypto Wallet Browser Extensions

A comprehensive security analysis has uncovered severe data leaks and tracking vulnerabilities in 85 different cryptocurrency wallet browser extensions, potentially exposing millions of users to privacy breaches and asset tracking. The study, conducted by a team of independent cybersecurity researchers, found that a significant number of these extensions are transmitting sensitive user data—including wallet addresses and transaction histories—to third-party analytics and advertising networks without clear user consent.

Scope of the Data Leak Problem

The research, which has not yet been formally published in a peer-reviewed journal but has been shared with affected development teams, analyzed the network traffic of over 100 of the most popular Chrome and Firefox extensions used for managing cryptocurrency wallets. The findings indicate that 85 of these extensions, representing a substantial portion of the market, were making network requests to domains associated with tracking services. This data leakage allows these third parties to build detailed profiles of user activity, linking specific blockchain addresses to IP addresses and browsing patterns.

Also read: XRP ETF Gains Institutional Backing From Virginia and Florida Investment Advisors

This is particularly concerning because it undermines the core promise of pseudonymity in many cryptocurrency networks. While a user’s public wallet address is visible on the blockchain, linking it to a real-world IP address or browsing history can make it easier for malicious actors or data brokers to identify the individual behind the wallet.

Immediate Risks for Crypto Users

The immediate risk for users is a significant loss of financial privacy. The leaked data could be used for targeted phishing attacks, where scammers, knowing a user’s transaction history, craft highly convincing emails or messages. In more severe scenarios, the exposure of IP addresses linked to high-value wallets could make users a target for physical theft or extortion. The researchers emphasized that the issue is not limited to lesser-known or scam extensions; several popular and widely trusted wallets were also found to be leaking data.

Also read: BlackRock’s BUIDL Fund Doubles on Avalanche, Surpasses $900M in AUM

The study’s lead researcher stated, in a report shared with BleepingComputer, that the problem stems from the integration of third-party analytics and error-reporting libraries within the extensions. These libraries, while common in software development, often have broad data collection permissions that are not properly sandboxed within the browser extension environment.

What Users Can Do Now

Until developers release patches, users are advised to take proactive steps to protect their privacy. This includes auditing all installed browser extensions and removing any that are not essential. Users can also use browser privacy settings or dedicated extensions to block tracking requests, though this may break the functionality of some wallets. For high-value assets, using a dedicated hardware wallet with a browser profile that has no other extensions installed is a recommended security practice. The researchers are expected to release a full list of affected extensions once a majority of developers have had a reasonable window to address the vulnerabilities.

Written by

Moris Nakamura

Moris Nakamura is the editor-in-chief at CryptoNewsInsights, leading editorial strategy and contributing in-depth analysis on Bitcoin markets, macroeconomic trends affecting digital assets, and institutional cryptocurrency adoption. With over ten years of experience spanning financial journalism and blockchain technology research, Moris has established himself as a trusted voice in cryptocurrency media. He began his career as a financial markets reporter in Tokyo, covering foreign exchange and commodity markets before pivoting to full-time cryptocurrency journalism during the 2017 market cycle.