Is BearByLegacy safe?

Low risk

BearByLegacy lets any webpage open a transaction approval prompt without a prior dapp connection.

BearByLegacy's content script runs on all webpages and forwards transaction request events into the extension. On Manifest V3, the background handler adds those transactions to the confirmation queue and opens the approval popup before checking that the page was previously connected.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Rinatv0.5.6Chrome Web Store
15Risk
Who publishes it

Rinat - 1 other listing from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Same store account

1 other listing published from this account, 30k+ users between them. 1 of them carries a finding.

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

explorer.massa.net
Also called by 1 other listing: Energy8 Wallet
buildnet.massa.net
Also called by 2 other listings: Energy8 Wallet, Enkrypt: ETH, BTC and Solana Wallet
mainnet.massa.net
Also called by 2 other listings: Energy8 Wallet, Enkrypt: ETH, BTC and Solana Wallet

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026papngmkmknnmfhabbckobgfpihpdgplk