Chrome Web Store
92Versions
1Code reviewed

No malware found

In code review (v1.7.16)

Our reviewer read version 1.7.16 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

UniSat Wallet, used by 500,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It comes from a trusted publisher and was last updated in September 2026.

Analyst notes

The extension is a widely-used Bitcoin wallet (500k users, 3+ years old) with a trusted publisher and open-source code. The content script performs standard wallet provider injection and all inter-component communication uses chrome.runtime messaging, staying within the extension boundary. Network error reporting is minimal, first-party, and consistent with operational telemetry. The elevated ML and risk-engine scores are artifacts of the large bundled script (e.g., lodash) and typical wallet-all_urls permissions, not evidence of malicious behavior. No data exfiltration, code injection, or obfuscation beyond normal minification was found.

UniSat Wallet

UniSat Wallet Chrome extension security report

ID: ppbibelpcjmhbdihakflkdcoccbgbkpo

Supported Languages

🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇺🇸English
🇫🇷French
🇯🇵Japanese
🇷🇺Russian
🇪🇸Spanish

Extension Info & Metadata

Status
Active
Version
1.7.22
Size
5.77 MB
Rating
4.3/5
Reviews
155
Users
500,000
Type
Extension
Updated
Sep 28, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
unisat.io
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
500,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7
Screenshot 8

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation • 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

About this extension

Inscribe and store your inscriptions in the world's first open-source Ordinals Chrome wallet!

Read the publisher’s full description

Why Choose UniSat? 💰 All-in-One Asset Management Securely store and manage your Bitcoin and all Bitcoin-native assets including Ordinals, Runes, and Alkanes in one unified interface. 🔐 100% Non-Custodial Your keys, your crypto. UniSat never has access to your private keys or funds. You maintain complete control at all times. 💻 Fully Open Source Built with transparency in mind. Review our code anytime at https://github.com/unisat-wallet/extension Feature Highlights 🔥 Real-Time Asset Tracking Monitor prices, review transaction history, and discover trending assets with UniScan—our built-in Bitcoin explorer. ✍️ One-Click Trading & Minting Mint and trade assets directly from your wallet. Seamlessly connect to UniSat's native platforms or third-party dApps. ✅ Personalized Experience Customize your wallet layout, select your preferred language, and configure security settings to match your needs. ⚡ Lightning Network Support Coming soon—enjoy faster transactions and lower fees with integrated Lightning Network functionality. Get Started Today UniSat Wallet delivers the perfect combination of security, convenience, and power for managing your Bitcoin assets. Download now and take full control of your digital wealth! 🌐 Learn more: https://unisat.io/

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
1.7.22
Latest
5.77 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.21
5.77 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.10
4.58 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.20
4.67 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.19
4.65 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.17
4.65 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.16
4.65 MBNo malware found0
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.15
4.65 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.14
4.65 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
1.7.13
4.65 MBNot scanned—
1ed082fce7dcd4e2ccf12f41d54c71209d22d46ca7876764dc160ffe89678a6e
Showing 1 to 10 of 100 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Tools