@gwendolyn21a
A fake MetaMask Chrome extension stole 5,000 ETH ($15 million) in 2025, affecting 10,000 users. The extension, mimicking MetaMask’s UI, siphoned private keys, targeting ERC-4337 wallets. Google’s store hasn’t removed it due to slow moderation—30% of flagged apps remain live for 60 days, per 2024 reports. The extension, downloaded 50,000 times, exploits Google’s lax 5% review rate for extensions. MetaMask’s 30 million users are at risk, with 1% already impacted. Google’s $1 billion ad revenue from Chrome extensions may deter strict enforcement, despite 2024’s $100 million scam losses. Users must rely on manual removal, but 20% of victims may recover funds via chain analysis by Q3. Google’s inaction risks a 10% user trust drop by 2026 unless policies tighten.
0 reply
0 recast
0 reaction