Safery Wallet is a secure wallet for managing Ethereum cryptocurrency with flexible settings. Safery Wallet is a reliable and…
Summary:
The Safery: Ethereum Wallet extension is confirmed to exhibit malicious behavior by stealing wallet seed phrases, posing a critical security threat to users' cryptocurrency assets.
Key insights:
Flags items that exhibit confirmed malicious activity.
Evidence
This extension steals wallet seed phrases by encoding them as fake Sui addresses and sending micro-transactions to them from an attacker-controlled wallet, allowing the attacker to monitor the blockchain, decode the addresses back to seed phrases, and drain victims funds.
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
Flags items that are brand new on the marketplace, suggesting concerns about the extension's reputation and the publisher's reliability.
AI-powered analysis of the extension's source code for security insights and risk assessment.
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.
