Is Kalp Wallet safe?

Medium risk

Kalp Wallet lets any website spoof an approved dapp URL and request wallet read or write RPCs.

Kalp Wallet runs a content script on all websites and accepts page-supplied dapp URL values when forwarding wallet requests. A site can pose as a previously connected dapp to request enrollment IDs or read transaction results, or trigger the wallet transaction flow with attacker-supplied arguments.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

40Risk
Who publishes it

No other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on kalpwallet.com

    https://kalpwallet.com/* and 1 more

  • Read and change your data on kalpdigital.com

    https://kalpdigital.com/* and 1 more

  • Read and change your data on kalp.network

    https://kalp.network/* and 1 more

  • Store data in your browser

    storage

  • Show a panel beside the page

    sidePanel

windows
Updated 2 November 2026ajkigpnleboodhdlminnlmldegieilfc