Is UniTap Wallet safe?

Low risk

UniTap Wallet exposes an unlocked account address to every website before connection approval.

When the wallet is unlocked, UniTap Wallet injects a page provider on all websites and automatically publishes the current account address during initialization. This lets page scripts read the selected address before the site has requested or received connection approval.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

UniTapv1.3.6.9Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.3.6.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Act on the current tab, but only after you click the extension

    activeTab

Where it sends data

Destinations our analysis observed UniTap Wallet contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • websites you visit

    UniTap Wallet sends data to websites you visit. Named as a recipient in this extension's own analysis.

Updated 30 September 2026hkcpondnpackipljdelghfnhgppmhfih