Is Ready X safe?
Ready X is medium risk. With Shop-to-Earn enabled, Ready X checks navigations against a whitelist of shopping domains. On a match, it POSTs the page URL, tab context, and the wallet address described in this claim to api.bringweb3.io/v1/extension/check/popup.
Who publishes itArgent Labs - no other listings under this identity, 27 shared hostnames
Argent Labs - no other listings under this identity, 27 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 27 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Shop-to-Earn sends page URLs to Bringweb3 check API
With Shop-to-Earn enabled, Ready X checks navigations against a whitelist of shopping domains.
On a match, it POSTs the page URL, tab context, and the wallet address described in this claim to api.bringweb3.io/v1/extension/check/popup.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user enables Shop-to-Earn and navigates to a whitelisted shopping domain.
The extension checks the navigation and sends page URL context to the Bringweb3 popup check endpoint.
- Page URLhttps://www.example-shop.com/product/123 (illustrative)
Identifies the specific page being checked for Shop-to-Earn eligibility.
- Tab contextactive shopping tab (illustrative)
Provides browser tab context associated with the navigation event.