CryptoSlate
A Bitcoin Price Tracker Chrome extension with 50,000 users is being advertised for $55,650, and the sale includes far more than a ticker: the published product, its source code, 14 days of handover assistance, and control of all future updates. The Chrome Web Store listing identifies Extpose as the provider and displays BTC/USD pricing from Binance. The seller describes the product as pre-revenue and reports 37,100 installs over the past year. No completed transaction is documented and no malware is tied to the listing, but the shape of the offer mirrors how recent supply-chain attacks began.
Why it matters
Security firm Socket documented in August that attackers acquired five legitimate extensions from their original authors and later shipped malicious updates, including fake Ledger and Trezor recovery interfaces built to harvest seed phrases, wallet-connection hijacking, and code injected into visited pages. Socket's Superior campaign tracker is still labeled ongoing as of Nov. 13, with 33 affected artifacts across 24 unique packages and last activity recorded Nov. 6. Acquired extensions keep performing their advertised function at first, which makes a tool continuing to work a weak assurance about anything else it does.
Market impact
Microsoft's Edge documentation adds a timing gap that raises the stakes: after an ownership transfer, the new owner gains full control of the listing and updates immediately, while the old owner's name, description, and privacy-policy URL can stay publicly visible until the next update ships. For anyone holding crypto, the practical question is whether a familiar tool's ownership and permissions still justify keeping it installed. Socket recommends regularly auditing extensions and removing unnecessary or suspicious ones.
Frequently asked questions
-
What is included in the $55,650 Bitcoin Price Tracker sale listing?
The published Chrome extension with 50,000 users, its source code, and 14 days of handover assistance. The buyer takes control of the listing and all future updates for the existing install base.
-
Is the Bitcoin Price Tracker extension currently malicious?
No. The sale advertisement does not connect the extension or its seller to malware, and no completed transaction is documented. The risk is that a future owner could push malicious updates to people who already installed it.
-
How did the Socket Superior supply-chain campaign work?
Attackers acquired five legitimate extensions from their authors, let them function normally, then introduced malicious updates. Socket records 24 unique affected packages and labels the campaign ongoing as of Nov. 6.
-
What happens on Edge after an extension ownership transfer?
The new owner gains full control over the listing and updates immediately, while the old owner's name, description, and privacy-policy URL can remain publicly visible until the new owner publishes an extension update.
-
How can crypto users protect themselves from compromised browser extensions?
Socket recommends regularly reviewing installed extensions, checking their permissions and ownership, and removing unnecessary or suspicious ones, especially tools that interact with wallets or exchange data.
Crypto News
CoinTelegraph
WuBlockchain
TheBlock
Lookonchain