Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeCrypto.com | Onchain Extension
Findings · 3
+2 more findings locked
HIGH FINDINGS · 3
  1. 01Extension POSTs wallet token balances (address, amounts, symbols, fiat prices) signed with the user's private key to ex-wallet.crypto.com/extension/ncw-api/api/data/v2/wallet_balance on every balance refresh
  2. 02Segment.io analytics telemetry sends persistent device UUID, browser fingerprint, wallet mode and wallet count to api.segment.io on wallet load/unlock
  3. 03Extension sends transaction analytics (txnHash, wallet address, chain, dapp URL) to Segment and to ex-wallet.crypto.com/extension/ncw-api/api/data/ext after every blockchain transaction broadcast
+2 more findings locked
OTHER EXTENSIONS

Is Crypto.com | Onchain Extension safe?

High risk

No summary available.

Crypto.comv3.9.0Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+2 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026hifafgmccdpekplomjjkcfgodnhcellj

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact