# Is Exodus safe? Check before you connect | TradingAgentStack

> Exodus: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-25.

Canonical: https://tradingagentstack.com/check/exodus/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Exodus

# Is Exodus safe to connect?

Self-custody wallet · Bitcoin, Ethereum, Solana, others. Checked 2026-10-25; every line links its source.

**Worst case:** Exodus is self-custody: typing your 12-word secret key into a fake Exodus app, extension or 'support' form hands over every coin in the wallet. Coins in a swap sit with the third-party provider until it delivers.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Download only from exodus.com/download (App Store id1414384820, Google Play exodusmovement.exodus, desktop installers) and check the published hash. Never use a Snap or other package-store build, or any 'Exodus' browser extension.

2. Exodus never asks for your 12-word secret key or password, by email or otherwise. Treat any such email as phishing, even from an @exodus.com address.

3. Keep bot or trading money in a separate wallet, and do a small test swap first to see how long the third-party provider takes.

## What it can do with your money

| Who holds the keys | You hold the keys Self-custody: your coins sit in 'your self-custody Exodus wallet', and 'Exodus users are responsible for storing their own recovery phrase' (a 12-word secret key). Exodus calls itself 'a software platform ONLY' and 'will never ask any of our customers to provide their passwords, private keys, or 12-word secret key' (https://www.exodus.com/support/en/articles/8836608-i-received-an-email-from-exodus-asking-me-to-provide-my-12-word-secret-key-password). Exodus Markets and Exodus Predictions are newer in-app trading features. [source](https://www.exodus.com/support/en/articles/8598630-how-do-i-swap-crypto-in-exodus-swap) |
| --- | --- |
| Can funds be sent out to any address? | Yes. Self-custody wallet: you sign sends yourself, to any address. [source](https://www.exodus.com/support/en/articles/8598630-how-do-i-swap-crypto-in-exodus-swap) |
| Swaps and third parties | 'Swap services are available through third-party API providers': your coins leave your self-custody wallet for the provider, and the swapped coin is sent back. Providers aren't named in the article. Minimum and maximum amounts vary by liquidity, and Exodus support handles swap issues (https://www.exodus.com/support/en/articles/8598692-how-do-i-contact-exodus-support-about-a-swap). [source](https://www.exodus.com/support/en/articles/8598630-how-do-i-swap-crypto-in-exodus-swap) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `exodus.com`

- X: `@exodus`

- GitHub: `github.com/ExodusMovement`

- App: `https://apps.apple.com/app/apple-store/id1414384820`

- App: `https://play.google.com/store/apps/details?id=exodusmovement.exodus`

- App: `https://www.exodus.com/download/`

Where we confirmed these
- https://www.exodus.com/download/ (App Store id1414384820, Google Play exodusmovement.exodus, desktop builds from downloads.exodus.com with a hashes file, github.com/ExodusMovement, twitter.com/exodus)

- https://www.exodus.com/support/en/articles/8598640-how-do-i-install-exodus (updated 2026-09-22: App Store id1414384820, Google Play exodusmovement.exodus, desktop from exodus.com/download)

- https://www.exodus.com/support/en/articles/8598740-which-domains-does-exodus-use (updated 2026-09-22: exodus.com/download is 'the only official source' for Exodus; footer links github.com/ExodusMovement and twitter.com/exodus)

- https://apps.apple.com/us/app/exodus-crypto-payments/id1414384820 (seller Exodus Movement Inc, developer website exodus.com/mobile, v26.10.23)

- https://play.google.com/store/apps/details?id=exodusmovement.exodus (developer Exodus Movement, Inc., website exodus.com/mobile, 5M+ downloads)

- https://github.com/ExodusMovement (GitHub-verified domains exodus.com and www.exodus.com; links @exodus)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2025-08-08 | 'GreedyBear' campaign: 150+ malicious Firefox add-ons impersonating Exodus, MetaMask, Rabby and TronLink stole more than $1M (Koi Security, via The Hacker News). (third-party report) | more than $1M | not refunded | [source](https://thehackernews.com/2025/08/greedybear-steals-1m-in-crypto-using.html) |
| 2025-07-03 | Koi Security found 40+ fake wallet add-ons on the Firefox store impersonating Exodus, MetaMask, Phantom, Trust Wallet, Coinbase and others (third-party report). (third-party report) |  | reported to Mozilla | [source](https://thehackernews.com/2025/07/over-40-malicious-firefox-extensions.html) |
| undated | (2024-02) Fake 'Exodus' app in the Ubuntu Snap Store (publisher 'Movement Exod'): a user who restored his wallet in it lost ~9 BTC (~$490,000), reported on the Snapcraft forum. (reported by users) | ~9 BTC (~$490,000) | not recovered | [source](https://www.linuxpromagazine.com/index.php/layout/set/print/Issues/2026/307/SnapScope) |

## Check a link

Got a link, @handle or repo that claims to be Exodus? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Exodus

We email you if we add an incident, a freeze report, a known fake or a deadline for Exodus. Free; unsubscribe anytime.

## More checks: Wallets
[Phantom](https://tradingagentstack.com/check/phantom/)[MetaMask](https://tradingagentstack.com/check/metamask/)[Rabby Wallet](https://tradingagentstack.com/check/rabby/)[Trust Wallet](https://tradingagentstack.com/check/trust-wallet/)[Backpack](https://tradingagentstack.com/check/backpack/)[Solflare](https://tradingagentstack.com/check/solflare/)[Coinbase Wallet](https://tradingagentstack.com/check/coinbase-wallet/)[Electrum](https://tradingagentstack.com/check/electrum/)[Keystone](https://tradingagentstack.com/check/keystone/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)