Is Exodus safe to connect?
Self-custody wallet ยท Bitcoin, Ethereum, Solana, others. Checked 2026-10-25; every line links its source.
Worst case: Exodus is self-custody: typing your 12-word secret key into a fake Exodus app, extension or 'support' form hands over every coin in the wallet. Coins in a swap sit with the third-party provider until it delivers.
Safe setup in 3 steps
- Download only from exodus.com/download (App Store id1414384820, Google Play exodusmovement.exodus, desktop installers) and check the published hash. Never use a Snap or other package-store build, or any 'Exodus' browser extension.
- Exodus never asks for your 12-word secret key or password, by email or otherwise. Treat any such email as phishing, even from an @exodus.com address.
- Keep bot or trading money in a separate wallet, and do a small test swap first to see how long the third-party provider takes.
What it can do with your money
| Who holds the keys | You hold the keys Self-custody: your coins sit in 'your self-custody Exodus wallet', and 'Exodus users are responsible for storing their own recovery phrase' (a 12-word secret key). Exodus calls itself 'a software platform ONLY' and 'will never ask any of our customers to provide their passwords, private keys, or 12-word secret key' (https://www.exodus.com/support/en/articles/8836608-i-received-an-email-from-exodus-asking-me-to-provide-my-12-word-secret-key-password). Exodus Markets and Exodus Predictions are newer in-app trading features. source |
|---|---|
| Can funds be sent out to any address? | Yes. Self-custody wallet: you sign sends yourself, to any address. source |
| Swaps and third parties | 'Swap services are available through third-party API providers': your coins leave your self-custody wallet for the provider, and the swapped coin is sent back. Providers aren't named in the article. Minimum and maximum amounts vary by liquidity, and Exodus support handles swap issues (https://www.exodus.com/support/en/articles/8598692-how-do-i-contact-exodus-support-about-a-swap). source |
Official links
- Website:
exodus.com - X:
@exodus - GitHub:
github.com/ExodusMovement - App:
https://apps.apple.com/app/apple-store/id1414384820 - App:
https://play.google.com/store/apps/details?id=exodusmovement.exodus - App:
https://www.exodus.com/download/
Where we confirmed these
Incidents
| Date | What happened | Amount | Outcome | Source |
|---|---|---|---|---|
| 2025-08-08 | 'GreedyBear' campaign: 150+ malicious Firefox add-ons impersonating Exodus, MetaMask, Rabby and TronLink stole more than $1M (Koi Security, via The Hacker News). | more than $1M | not refunded | source |
| 2025-07-03 | Koi Security found 40+ fake wallet add-ons on the Firefox store impersonating Exodus, MetaMask, Phantom, Trust Wallet, Coinbase and others (third-party report). | reported to Mozilla | source | |
| undated | (2024-02) Fake 'Exodus' app in the Ubuntu Snap Store (publisher 'Movement Exod'): a user who restored his wallet in it lost ~9 BTC (~$490,000), reported on the Snapcraft forum. | ~9 BTC (~$490,000) | not recovered | source |