Is MetaMask safe?

Clean risk

MetaMask is rated clean - our review surfaced no unexpected behaviour.

metamaskv13.16.1Chrome Web Store
0Risk
Who publishes it

Consensys Software Inc. - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
metamask
Declared legal entity
Consensys Software Inc.
Registered address
5049 Edwards Ranch Rd, Fort Worth, TX 76109-4213, US
Registered contact
CONSENSYS SOFTWARE INC.

Same operator - 2 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 26 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

gas.api.cx.metamask.io
Also called by 1 other listing: Dolphin X
sievecache.com
Also called by 1 other listing
desktop.telegram.org
Also called by 2 other listings
notification.api.cx.metamask.io
Also called by 2 other listings: Dlicom - Crypto Wallet, D-Wallet
on-ramp-content.api.cx.metamask.io
Also called by 2 other listings, including Dlicom - Crypto Wallet
trigger.api.cx.metamask.io
Also called by 2 other listings: Dlicom - Crypto Wallet, D-Wallet
price.api.cx.metamask.io
Also called by 3 other listings, including Dlicom - Crypto Wallet
rpc.hyperliquid-testnet.xyz
Also called by 3 other listings
node-2.node.web3auth.io
Also called by 4 other listings
node-3.dev-node.web3auth.io
Also called by 4 other listings, including Keplr
node-3.node.web3auth.io
Also called by 4 other listings
node-4.dev-node.web3auth.io
Also called by 4 other listings, including Keplr
node-4.node.web3auth.io
Also called by 4 other listings
shasta.tronscan.org
Also called by 4 other listings, including TronLink
static.cx.metamask.io
Also called by 4 other listings
11155111.rpc.thirdweb.com
Also called by 5 other listings
consensys.io
Also called by 5 other listings, including D-Wallet
getfeedback.com
Also called by 5 other listings
nft.api.cx.metamask.io
Also called by 5 other listings, including D-Wallet
node-1.dev-node.web3auth.io
Also called by 5 other listings, including Keplr, Keplr
node-1.node.web3auth.io
Also called by 5 other listings, including Keplr, Keplr
node-2.dev-node.web3auth.io
Also called by 5 other listings, including Keplr, Keplr
node-5.dev-node.web3auth.io
Also called by 5 other listings
node-5.node.web3auth.io
Also called by 5 other listings
blockscout.com
Also called by 6 other listings
nile.tronscan.org
Also called by 6 other listings, including TronLink

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026nkbihfbeogaeaoehlefnkodbefgpgknn