Pocket Universe Extension

Most people lose crypto by signing something they did not understand: setApprovalForAll on a fake marketplace, a “claim” that drains ETH, a Seaport order that empties NFTs, a Permit that empties stables. Pocket Universe’s job is to intercept that moment. You click Confirm on a dApp. The extension pops first, runs a simulation (historically forked-chain / backend analysis), and shows balance changes and risk flags before MetaMask or your other wallet takes over. Reject there and the bad payload never reaches a signature.

Install from the official Chrome / Brave / Firefox store links on pocketuniverse.app. No wallet connect required for basic protection. It hooks the browser provider flow used by MetaMask, Coinbase Wallet, OKX, Trust, Phantom (where EVM), and similar extensions. Marketing cites 200k+ users and large weekly simulation volume. Founders (Justin Phu, Nishan Samarasinghe / Refract) built the early product; Kerberus Cyber Security acquired Pocket Universe / Refract in August 2025 and kept the brand while folding it into a broader “crypto antivirus” roadmap with Sentinel3. Kerberus links now sit on the official site. Product direction is Kerberus-owned even if the popup still says Pocket Universe.

Threat coverage in practice: malicious approvals, wallet drainers, fake NFT listings aimed at OpenSea/Blur traders, honeypot mints you can buy but not sell, counterfeit tokens, phishing sites, and rug-style warnings on trading UIs. Rug / serial-rugpuller alerts and URL checks against known scam sets show up in the feature list. It is a second opinion layer, not omniscience. Novel attacks, off-browser signing (mobile wallet app, hardware-only flows without the extension in path), and user override of red warnings still lose money.

Money model matters. Basic protection is free to install. Pocket Universe Pro / coverage markets reimbursement up to $30,000 USDC per eligible transaction if detection misses a threat that originated on a Web3 site under their terms. Claims have deadlines (e.g. within 14 days in Kerberus coverage writeups), require the extension to have been active, and exclude cases where the tool already showed a hard red block you ignored. Read current coverage docs. To fund the stack, Kerberus/Pocket documents a flat ~0.8% fee on transactions that use Uniswap or PancakeSwap routers, or Jupiter / 1inch aggregators. Terms say fees show before you approve. Default-on full protection means many users discover the fee in the quote. If you route large volume through those venues, compare all-in cost to Rabby / direct DEX without the extension fee, or adjust protection settings deliberately. Independent researchers have dissected how the extension rewrites provider calls to attach that fee. Treat that as the business model, not a free public good.

What it is not: custody, a recovery desk for stolen seeds, mobile protection, or a substitute for hardware wallets and approval hygiene (Revoke.cash still matters for leftover allowances). No mobile app. Phishing clones of the extension brand exist. Only install from verified store links.

Versus Rabby: Rabby bakes simulation into the wallet itself with lower in-wallet swap fees. Pocket adds a wallet-agnostic shield if you stay on MetaMask / Coinbase Wallet / etc. Versus Revoke.cash Sidekick: Revoke owns approval inventory and revoke ops; Pocket owns pre-sign asset-movement clarity and optional insurance-shaped coverage. Versus wallet-native Blockaid alerts: overlapping job; stacking tools can help or create alert fatigue.

Who it’s for: desktop DeFi and NFT users on MetaMask-class wallets who want a clear “what am I signing?” popup and are willing to pay the DEX fee tax or manage settings. Who should skip it: mobile-only users, people who refuse any extension fee on swaps, and anyone who will click through red warnings anyway.

STRENGTHS

- Clear pre-sign simulation of asset movements without importing a seed or switching wallets

- Strong track record catching drainers, fake listings, honeypots, and approval scams at Confirm time

- Works across popular browser wallets. Install once, keep your existing setup

- Optional Pro coverage (up to ~$30k) adds a financial backstop when detection misses, if claims qualify

- Phishing / rug / fake-token warnings beyond raw calldata hex

- Large installed base and Kerberus backing for continued security investment

- Chrome, Brave, Firefox availability for desktop Web3

WEAKNESSES

- ~0.8% fee on Uniswap / PancakeSwap / Jupiter / 1inch routes. Expensive for active traders if left on by default

- Coverage is not blanket insurance. Deadlines, eligibility, and “you ignored the alert” exclusions apply

- Desktop browser only. No protection when you sign in mobile wallet apps

- Simulation can miss novel scams or look clean on carefully crafted malice. Override risk remains

- Extension must sit in the signing path. Hardware or other-device flows without it get zero help

- Provider interception is powerful and sensitive. Trust the vendor (now Kerberus) with deep browser access

- Overlap with Rabby / native wallet alerts can mean duplicate popups and fee stacking

- Not a revoke/approval-hygiene tool. Still need periodic allowance cleanup elsewhere