Large-scale crypto attack: under the guise of popular wallets stole all assets

DexnetDexnet
3 min read

Summer 2025 has become a serious wake-up call for the entire crypto community. Over 40 malicious extensions were discovered in the official Firefox add-on store, disguised as popular crypto wallets. MetaMask, Trust Wallet, Phantom, OKX, Coinbase, MyMonero, Exodus — tens of thousands of users trusted them… and lost everything.

Research by the Koi Security team revealed: these extensions were not just clones of legitimate wallets, but fully functional theft tools.

Hackers embedded event listeners into the extension code, tracked the input of private keys and seed phrases, disguised error notifications, and quietly sent all entered data to their servers. They operated on a massive scale, using fake reviews and counterfeit installs.

The result? Users lost access to their wallets in minutes.

Why did this happen?

Because most users don’t realize how vulnerable browser-based wallets really are.

A browser is an open door. It’s full of trackers, ad scripts, cookies — and now, fake extensions. Entering private keys and seed phrases in this environment is like leaving the key to your vault taped to the front door.

What about cold wallets? Aren’t they safer?

Cold wallets have long been considered the safest option — especially for holders who don’t make frequent transactions.

But there’s a catch:

You buy one, write down the seed phrase, put the device in a drawer — and forget about it. Years go by.

Then one day you try to access your assets and discover:

  • The device is no longer supported

  • The manufacturer’s website is gone or compromised

  • Firmware is outdated

  • The software is insecure

Even worse, some devices sold “factory sealed” are now being tampered with. Fake Ledger and Trezor wallets are increasingly found on marketplaces — and spotting a fake is nearly impossible until it’s too late.

DexSAFE: Control. Security. Simplicity.

All of this shows one thing clearly: it’s time for a new kind of solution.

DexSAFE is more than just a wallet. It’s protection for your freedom.

What makes DexSAFE different?

Total decentralization — Only you have access. No one else.
Seed phrase is yours alone — It’s never stored on servers, never transmitted.
Important: Write it down on paper and keep it in a safe place.
Unique passphrase — An extra layer of protection. Even if someone learns your seed phrase, without your passphrase they get nothing.
Guaranteed privacy — No one knows who you are. And that’s the point.
Lost your phone? No problem. Just reinstall the app and restore access with your seed phrase.

DexSAFE — where security empowers you instead of limiting you.

We don’t offer illusions. We don’t ask for trust.
We give you control — in your hands.

Choose the smart alternative to outdated solutions.
Download DexSAFE only from official sources: 📱 Android or 📱 IOS.

Your assets deserve better. DexSAFE — security you control.

🌐Website 📰MediumInst📱Х

0
Subscribe to my newsletter

Read articles from Dexnet directly inside your inbox. Subscribe to the newsletter, and don't miss out.

Written by

Dexnet
Dexnet