Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

A study of 85 crypto wallet browser extensions by KU Leuven researchers revealed widespread privacy leaks that enable tracking and potential de-anonymization of users. The wallets expose users' addresses through normal operations, allowing linkage of multiple addresses, persistent tracking across sites, and cross-site address leakage via embedded frames. Despite responsible disclosure, most wallet vendors did not classify these issues as bugs, citing design intent or low risk, leaving users exposed to identity correlation even without malicious exploitation.

AI-extracted · verify before operational use