Security

Blanks can't touch your wallet. Check it yourself.

Crypto extensions that drain wallets are real. Blanks is built so it simply cannot: it never talks to a wallet, it only runs on two sites, and its code is public. Here is every permission, and how to verify all of it in a few minutes.

No wallet accessTwo sites onlyNo remote codePublic code & hashesVirusTotal 0/65
By design

What Blanks cannot do.

Not a promise in a policy — things the code has no way of doing. Each one can be checked in the published source.

Touch a wallet

No call to Phantom, MetaMask, Backpack or any wallet: no signTransaction, no signMessage, no window.solana. It works with no wallet installed.

Ask for a seed phrase

There is no field for a seed phrase, a private key or a password anywhere in the extension. Anyone asking for one in Blanks' name is a scammer.

Run on other sites

Blanks only loads on trade.padre.gg and axiom.trade. It has no “read and change all your data on all websites” access.

Send your data elsewhere

It can only reach public price APIs and trade-blanks.com. Chrome itself blocks any other address.

Download code later

Chrome extensions (Manifest V3) cannot run code fetched from the internet. What Google reviewed is all that ever runs.

Place a real trade

Every Blanks click is stopped before the site's own buy buttons receive it. Paper money only, always.

Permissions

Every permission, and why.

This is the complete list from manifest.json — the same one Chrome shows you before installing.

PermissionWhat Blanks uses it for
StorageKeeps your paper wallets, trades and settings in your browser.
AlarmsOne check every 30 seconds for the price alerts you set, so they fire even with every tab closed.
IdentityOnly if you choose Link with Google in the tracker, to recover your pseudo on another computer. Blanks keeps a hashed Google id — never your name, email or picture.
NotificationsOPTIONALAsked only when you click Enable desktop alerts, to tell you a price alert was crossed.
trade.padre.gg, axiom.tradeDraws the panel, your fills on the chart and the quick-buy buttons. No other website.
Jupiter, DexScreenerToken prices and pool liquidity, from public APIs.
Coinbase, Binance, Kraken, CoinGeckoThe SOL / USD rate only — public price endpoints. No account, no login, nothing about you.
trade-blanks.comThe optional tracker, leaderboard and update emails. Nothing is sent until you create a pseudo.

Full detail of what the optional features send, and for how long: privacy policy.

Verify

Check it in five minutes.

  1. Use a Chrome profile with no walletChrome menu → profile → Add. Install Blanks there: the panel, the orders, the replay — everything works without any wallet extension. A drainer needs a wallet; Blanks doesn't even look for one.
  2. Look at its site accessOpen chrome://extensions → Blanks → Details. Under site access you will see only trade.padre.gg, axiom.trade and the price APIs listed above.
  3. Watch its trafficOn the same page, enable Developer mode and click service worker under Blanks, then the Network tab. Trade on paper: only price requests go out.
  4. Compare the files with the public codeHash the extension installed on your disk and compare with the published list. The guide is in the repository's VERIFY.md.

Public code & hashes

The exact files published on the Chrome Web Store, the readable source of the minified ones, and a script that rebuilds them byte for byte.

v4.34.1 · Store package SHA-256
4bfca99f82e16af77b521e9f1ee4185e3789f8f5a1e9082b1b6c1d88e6e8d432

The repository is for checking the code, not for installing it. Install Blanks only from the Chrome Web Store: a copy loaded by hand gets no updates and cannot link Google.

Independent checks

Don't take our word for it.

Third parties that analyse Blanks without us.

Fake “Blanks” will appear. Here is how to spot them.

When a tool gets popular, copies with a wallet drainer inside follow. The real Blanks:

  • Never asks you to connect a wallet or to enter a seed phrase, a private key or a password.
  • Has no token and no airdrop. Anyone selling a “Blanks token” is a scammer.
  • Never contacts you in DMs — on Telegram, Discord or X. Support is by email only.
  • Is installed only from the Chrome Web Store — never from a .zip, a .crx, a GitHub folder or a link in a message.
trade-blanks.comChrome Web Store · mhegkceocponjlnnbinngggdmniigkgo

Seen a fake? Report it to jneveu.work@gmail.com. Found a security issue? Same address, subject “Blanks security”.