Research Finds Crypto Wallet Browser Extensions Leak User Data Across Sites
Review: audit your crypto wallet extensions, restrict permissions, and switch to privacy‑focused wallets.
Review: audit your wallet extensions, restrict permissions, and switch to privacy‑focused wallets.
Summary
Researchers at KU Leuven evaluated 85 of the most popular crypto wallet browser extensions and discovered that the wallets leak enough data to link and track users across sites. The wallets communicate with blockchain servers in a manner that ties separate addresses together, enabling third parties to follow users from one site to another. The study found that the extensions expose address information even when users are not actively transacting. This privacy breach allows attackers to build detailed profiles of wallet holders.
No immediate patch is available, but users can mitigate the risk by limiting extension permissions. The findings suggest that many wallets do not adequately isolate address data. Privacy‑focused wallets may offer better protection against such leaks. The research highlights the need for stricter privacy controls in crypto wallet extensions.
Key changes
- 85 crypto wallet browser extensions tested
- Wallets leak data that links and tracks users across sites
- Communication with blockchain servers ties separate addresses together
- Enables third parties to follow users from one site to another
- No immediate patch available
- Users can mitigate by limiting extension permissions
- Privacy-focused wallets offer better protection
- Research highlights need for stricter privacy controls