Is Monsta Wallet safe?

Clean risk

Monsta Wallet injects an all-site wallet provider bridge for page requests approved through its wallet middleware.

Monsta Wallet registers content scripts on file, HTTP, and HTTPS pages and injects its in-page provider into each frame. Pages can send wallet RPC requests such as account access, transaction signing, and typed-data signing, which the extension routes through its permission and approval middleware.

Monsta Infinitev2.2.4Chrome Web Store
1Risk
Who publishes it

SHANI ENTERTAINMENT PTE. LTD. - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Monsta Infinite
Declared legal entity
SHANI ENTERTAINMENT PTE. LTD.
Registered contact
LEE MING WEI

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.2.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on localhost:8545

    http://localhost:8545/

  • Read and change your data on every site you visit

    file://*/* and 1 more

  • Read and change your data on every secure site you visit

    https://*/*

  • Act on the current tab, but only after you click the extension

    activeTab

  • Write to your clipboard

    clipboardWrite

  • Show you desktop notifications

    notifications

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Run hidden pages in the background

    offscreen

Updated 30 September 2026hpbgcgmiemanfelegbndmhieiigkackl