Is Aurox Wallet safe?

Clean risk

Aurox Wallet reads typed page input to warn when it matches locally unlocked wallet secrets.

Aurox Wallet injects an anti-phishing script on web pages when the feature is enabled by default. The script forwards typed input from page fields to its service worker, which compares it locally against unlocked mnemonics and private-key prefixes before deciding whether to show a warning.

Auroxv2.0.0Chrome Web Store
3Risk
Who publishes it

Aurox Holdings Inc - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Aurox
Declared legal entity
Aurox Holdings Inc
Registered address
4514 Cole Ave Suite 600, Dallas, TX 75205-4193, US
Registered contact
Giorgi Khazaradze

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api.cryptokitties.co
Also called by 5 other listings, including TraitSniper

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • See the address and title of every tab you have open

    tabs

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Run hidden pages in the background

    offscreen

declarativeNetRequestWithHostAccess
Updated 30 September 2026kilnpioakcdndlodeeceffgjdpojajlo