METAWALLET is low risk. The rating reflects signals from our analysis that have not yet been published as detailed findings.

Who makes METAWALLET?

METAWALLET is published by Inblock.

What servers does METAWALLET send data to?

Our analysis observed METAWALLET sending data to dapp.metacoin.network.

Is METAWALLET safe?

Low risk

METAWALLET ships a hardcoded HMAC secret that signs requests to the Metacoin backend.

When the extension calls the Metacoin backend, it adds AppId and AppHash headers generated from a secret embedded in its service worker. Those requests go to dapp.metacoin.network, including the /v4/crypt/key API, so the backend credential can be copied from the extension bundle and reused to create the same signed headers.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Inblockv1.8.2Chrome Web Store

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed METAWALLET contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

dapp.metacoin.network
METAWALLET sends data to dapp.metacoin.network. No other extension we have analysed sends data here.