Crypto users are being urged to stay alert after researchers uncovered a malicious Chrome extension named “Safery: Ethereum Wallet.” Despite appearing legitimate—and even ranking #4 on the Chrome Web Store—the extension contained a hidden backdoor designed to steal users’ private seed phrases.
Security experts warn that even highly ranked wallet tools can be dangerous. They advise users to thoroughly research any extension or wallet before installation to avoid compromising their assets.
How the Scam Operated
The fake wallet extension mimicked a genuine Ethereum wallet, offering a functional interface that allowed users to access their accounts. Behind the scenes, however, it quietly collected seed phrases—the master keys to all crypto funds.
Once harvested, attackers could instantly drain wallets, leaving no possibility for recovery. The scam gained traction partly because the extension appeared trustworthy due to its high ranking in the Chrome Web Store. Many users failed to verify the developer’s identity or inspect reviews, making them easy targets.
Why Seed Phrases Are Critical
Seed phrases are a wallet owner’s ultimate access credentials. Anyone with access to them can control and transfer all associated assets. Legitimate wallets never ask users to share seed phrases outside secure, verified environments.
Users who entered their seed phrases into the “Safery: Ethereum Wallet” extension unknowingly handed complete control of their funds to attackers. Losses can be severe for both new and experienced holders.
How to Stay Safe
Experts recommend the following security practices:
- Research thoroughly: Check reviews, developer information, and official sources.
- Verify downloads: Only install wallet extensions from trusted developers or official project websites.
- Never share seed phrases: Store them offline and never enter them into unknown apps or websites.
- Use hardware wallets: They offer stronger protection against online threats.
- Monitor wallets regularly: Watch for unusual transactions or unauthorized activity.
Implementing these steps greatly reduces the risk of falling victim to phishing and malicious software.
Staying Secure in a Growing Threat Landscape
The discovery of this scam underscores the rising risk of extension-based attacks in the crypto world. As browser wallets and decentralized apps become increasingly common, scammers continue to exploit unsuspecting users.
Crypto holders must treat seed phrases with extreme caution and verify every extension before use. With the right awareness and security habits, users can protect their digital assets as the crypto ecosystem evolves.

