Is xBull Wallet safe?
xBull Wallet lets webpages request wallet connection and public-key access through its injected browser bridge.
The extension runs a content script on HTTPS pages and localhost, injects its SDK, and forwards page messages for wallet connection and public-key requests to the extension background worker. Those requests carry the page-supplied origin and host that the background worker uses when checking saved site permissions, while signing requests include an additional same-origin check.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itCreit Technologies LLP - no other listings under this identity, 1 shared hostname
Creit Technologies LLP - no other listings under this identity, 1 shared hostname
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.40.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on connect.trezor.io
*://connect.trezor.io/8/*
Store data in your browser
storage