Protects crypto users from signing malicious transactions that steal their assets, clicking scam links on social media, and falling victim to rug pulls on token trading platforms

User installs the extension, which then passively monitors browser activity. When the user visits a Web3 dApp and initiates a transaction with their wallet, Pocket Universe intercepts and displays what the transaction will do before the wallet confirmation popup appears. If malicious activity is detected, warnings are shown. On token trading sites, rug-pull risk overlays are displayed. On Twitter/X, suspicious links in posts are flagged with safety warnings.

Target users: Cryptocurrency and Web3 users who transact with browser wallets / DeFi traders interacting with DEXs and NFT marketplaces / Users concerned about wallet security and phishing attacks

The popup.js file is 2.6MB of minified code - while keyword searches found no login/payment UI, deep inspection was limited by the tool budget
Cannot verify if dash.pocketuniverse.app requires account login for optional features like coverage claims
Cannot confirm whether the optional transaction coverage product is purchased within the extension or only externally

Monetization

No paid features detected

The extension itself is free to install and use. The store description mentions an optional paid 'transaction coverage up to $30,000 (it's optional and comes with a fee)' but this is an insurance product offered through Pocket Universe's website, not a feature gated within the extension. No payment processing code (Stripe, checkout, billing APIs) was found in the extension source. All 'pro', 'premium', 'checkout', 'stripe', 'subscription' keyword matches were in minified library code (zod schemas, logging utilities), not actual payment/upgrade logic. No upgrade prompts or paywall UI were found in the popup.

Confidence: 80
Payment platform: --
Source: AI / Medium
Login required: No
Reason: The store description explicitly states 'you don't need to connect your wallet' and the extension works passively by intercepting and analyzing transactions in-browser. No login UI or authentication flow was found in the popup code. The extension monitors when wallets connect to dApps (setConnectedWallet in background.js) but this is passive detection, not requiring the user to authenticate with the extension. All 'login' keyword matches in source code are in minified library/zod-validation fragments, not actual login flows.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

扩展能力较强：scripting、storage、webRequest
主机权限覆盖范围较宽
同时具备浏览数据与站点访问能力

Publisher

Kerberus Cyber Security, Inc.

Email: [email protected]
Phone: --
Address: 254 Chapman Rd ste 209 Newark, DE 19702 US

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access