Is Dingocoin Wallet safe?

Dingocoin Wallet exposes the user's active wallet address to any HTTPS website with no confirmation prompt.

This extension injects a window.dingo bridge into every HTTPS page. Its getActiveAccountAddress() call lets any page silently read the currently selected wallet address from browser storage and return it, with no origin check and no popup shown to the user. This differs from the extension's transaction-signing and data-signing actions, which do open a confirmation popup showing the requesting site before responding.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.