Is TanglePay IOTA Wallet safe?

Medium risk

TanglePay IOTA Wallet lets connected websites request its stored API login token.

The extension injects a bridge into every site and forwards page requests to its background script. After a site has an approved TanglePay connection, that bridge can return the stored login token from extension storage when the page calls get_login_token.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

bdgarrettjinv1.6.5Chrome Web Store
40Risk
Who publishes it

bdgarrettjin - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
bdgarrettjin
Website
tanglepay.com/

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.6.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on test.api.iotacat.com

    https://test.api.iotacat.com/

  • Read and change your data on test2.api.iotacat.com

    https://test2.api.iotacat.com/

  • Read and change your data on explorer-api.iota.org

    https://explorer-api.iota.org/

  • Read and change your data on node.iotaichi.com

    https://node.iotaichi.com/

  • Read and change your data on api.lb-0.h.chrysalis-devnet.iota.cafe

    https://api.lb-0.h.chrysalis-devnet.iota.cafe/

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

Updated 30 September 2026hbneiaclpaaglopiogfdhgccebncnjmc