Is Bloom safe?
Bloom is medium risk. On axiom.trade, Bloom Extension wraps the page's WebSocket constructor and reads its real-time market update messages. It extracts token and pair addresses from them and stores them in localStorage under axiom.pulse.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Axiom WebSocket messages are cached in extension-controlled localStorage.
On axiom.trade, Bloom Extension wraps the page's WebSocket constructor and reads its real-time market update messages.
It extracts token and pair addresses from them and stores them in localStorage under axiom.pulse.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-940
- Source
- Dynamic sandbox
You navigate to axiom.trade while the extension is installed.
The extension wraps WebSocket handling, reads update_pulse messages, and stores token and pair addresses in localStorage.
- Trading page message contenttokenAddress: 0x1234...abcd; pairAddress: 0xabcd...1234 (illustrative)
Real-time page messages can include token and pair addresses for markets viewed or updated on axiom.trade.