Socket Exposes 77 Malicious Firefox Wallet Extensions, 40 Steal Seed Phrases

The concentration of 77 malicious extensions in a single browser ecosystem, with more than half confirmed as seed-phrase stealers, points to a supply-chain problem that wallet providers cannot solve alone: browser add-on stores remain a soft target, and seed phrases sit at the most sensitive layer of self-custody. The exposure is not limited to any one wallet brand, since these extensions target the category broadly. Whether platform-level vetting of extensions tightens, and how quickly affected users can be identified and reached, is the open question.