A new study of popular cryptocurrency wallet extensions has uncovered alarming security risks, putting millions of users at risk of identity theft and financial loss. The research, conducted by experts from a leading cybersecurity firm, analyzed 85 extensions for their potential vulnerabilities and found that many are plagued by issues such as address leaks and cross-site tracking.
The study focused on browser extensions designed to interact with cryptocurrency wallets, which allow users to buy, sell, or trade digital currencies online. These extensions often require access to sensitive information, including wallet addresses and private keys. However, the researchers discovered that many of these extensions are not securing this data properly, making it vulnerable to unauthorized access.
The study found that some of the most popular cryptocurrency wallet extensions, used by millions of users worldwide, were leaking user addresses without proper consent. This means that when a user installs one of these extensions, their wallet address is revealed to third-party websites, potentially allowing hackers to track and target them. In addition, the researchers discovered that many extensions are engaging in cross-site tracking, which involves sharing user data with other websites or services.
The vulnerability arises from the way extensions interact with each other and with website APIs. When an extension requests access to a user’s wallet information, it often receives more than just what is requested. This excess information can include sensitive details such as addresses and private keys, which are then shared with third-party websites without the user’s knowledge or consent.
The study also highlighted the role of AI-powered vulnerability scanners in identifying these security risks. By using advanced machine learning algorithms, cybersecurity experts can now identify vulnerabilities that may have gone undetected for years. However, the researchers emphasized that human expertise is still essential in analyzing and mitigating these risks.
The findings of this study are a stark reminder that even seemingly secure online services can harbor hidden vulnerabilities. Users who rely on cryptocurrency wallet extensions to manage their digital assets would do well to review their security settings carefully and consider alternative solutions that prioritize user data protection.
Source: The Hacker News — 2026-07-14