Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

KU Leuven researchers tested 85 browser-extension crypto wallets and identified five privacy weaknesses—address linkage in requests, persistent permissions after disconnect, and address disclosure from embedded frames among them—that can let servers or trackers link multiple wallet addresses to the same person and potentially unmask identities; the issues affect millions of installs, some vendors have patched the worst case, but many consider the behavior 'by design' rather than a bug.