Is Crypto Donate Extension safe?
Crypto Donate Extension loads its settings over plain HTTP and uses the contract address from them as an ERC-20 approval spender.
The popup fetches network and contract settings from crypto-donate.net over unencrypted HTTP with no integrity check. The contract address in that file is passed as the spender to a token approve() call through the page's wallet provider. The user still has to confirm the transaction in their wallet.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Crypto Donate Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- crypto-donate.net
Crypto Donate Extension sends data to crypto-donate.net. No other extension we have analysed sends data here.