Is Zerion safe to connect?

Self-custody wallet ยท Ethereum, EVM networks, Solana. Checked 2026-10-29; every line links its source.

Worst case: Zerion is self-custody and says it can never see your recovery phrase, so if a fake 'Zerion' site or a fake airdrop post gets your seed phrase or a malicious signature, the attacker can empty the wallet. Zerion cannot cancel, refund or reverse a confirmed transaction, and if you lose both your password and seed phrase, nobody can restore access.

Already lost funds? What to do if a bot or wallet is drained.

Safe setup in 3 steps

  1. Install only from zerion.io: Chrome Web Store ID klghhnkeealcohjjanjjdaeeggmfmlpl, App Store id1456732565, Google Play io.zerion.android. Never type your recovery phrase into a website, including 'wallet scanner' or 'portfolio tracker' pages using Zerion's name.
  2. Treat 'Zerion airdrop' posts as scams until you have checked them on zerion.io (Zerion's own @zerion account was hijacked in 2023 to push one). Read Zerion's plain-language transaction preview and phishing warning before every signature.
  3. Use a separate Zerion address with only bot/trading money, and keep long-term holdings on a Ledger paired with Zerion, which keeps the keys on the device.

What it can do with your money

Who holds the keysYou hold the keys Self-custody: the recovery phrase is 'generated on your device and stays there' and Zerion 'can never access your recovery phrase or private keys'. The privacy policy says Zerion does not and will never store your wallet password, private key or seed phrase, and can't help if you lose both password and seed phrase (https://www.zerion.io/privacy-policy). source
Can funds be sent out to any address?Yes. You sign every send yourself, to any address. Zerion 'never holds your funds' and cannot cancel, refund or reverse a confirmed transaction. source
Swaps and third partiesZerion never holds your funds, so it cannot freeze your wallet on-chain. Swaps and bridges route through third parties (0x, 1inch, Hashflow), staking through StakeKit and buying through Ramp, MoonPay and Onramper (privacy policy, https://www.zerion.io/privacy-policy); those providers can refuse a trade. Zerion's terms (zerion.io/terms-conditions) could not be opened, so whether Zerion screens or blocks addresses in its own swap feature is not confirmed here. source

Official links

Not fully confirmed. Some of these links were confirmed in only one place, so treat them with care.

Where we confirmed these

Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

DateWhat happenedAmountOutcomeSource
2026-04-14AI-assisted social-engineering attack linked to a North Korean (DPRK) actor compromised a Zerion team member's device; about $100K was drained from Zerion's internal hot wallets. Zerion said 'No user funds, Zerion apps or infrastructure were affected' and took its web app offline for about 48 hours (disclosed on X, x.com/zerion/status/2044167535231414727, 2026-04-14 UTC; attack happened the week before).about $100K (Zerion's own funds)no user funds affected; credentials rotated, attacker wallets reported to law enforcementsource
2023-06-14Zerion's official X/Twitter account (@zerion) was taken over and posted a fake 'Zerion airdrop' linking to a phishing site; users who signed lost about $2,776 in ETH, $18,293 in ERC-20 tokens and $3,757 in NFTs. A related malware infection of a team member's device also lost about $53K of Zerion's own funds; 'No user private keys were affected'.about $24.8K from users, plus about $53K from ZerionZerion said it planned to reimburse affected userssource

What it knows about you

What Zerion collects and can see about you, and any past breach of customer data, so you know what could leak and what to watch for. From its own privacy policy, docs and notices, checked 2026-10-29. source source source

What it collects
  • Your public wallet addresses and their public on-chain data (transactions, assets) to show your portfolio
  • IP address (Zerion says it tries to keep only a hashed version, for no longer than 14 days in logs), device and browser details, and city/country in the app
  • Product usage analytics (clicks, screens, features, dApp launches); you can switch this off under Settings > Privacy > 'Share app usage analytics'
  • Push notification tokens with the wallet addresses you subscribe to, and details of transactions you are about to make (type, amount, assets) to compare fees
  • Email only if you subscribe, join early access or contact support
What it can seeZerion never stores your password, private key or seed phrase. It does see your public addresses, holdings and the trades you prepare, plus a hashed IP and device details. Blockchain requests go through Zerion's own proxy (rpc.zerion.io) to node providers such as QuikNode, Alchemy and Triton One (not in the dApp browser). Analytics go to Google Firebase, Mixpanel, Braze and others. Data is processed partly in the US and kept for up to five years after you delete your wallet. App Store label: product interaction and crash data, not linked to you. Your balances and transactions are public on the chains you use.
Past data breachesNone found in the vendor's notices or reputable reporting as of 2026-10-29. That doesn't prove nothing happened.

Check a link

Got a link, @handle or repo that claims to be Zerion? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to @TASCheckBot, or add it to your group so anyone can type /check. Alerts on new drains and fakes: @tradingAgentStk.

Get an alert for Zerion

We email you if we add an incident, a freeze report, a known fake or a deadline for Zerion. Free; unsubscribe anytime.

More checks: Wallets

PhantomMetaMaskRabby WalletTrust WalletExodusBackpackSolflareCoinbase WalletElectrumKeystoneLedger Live (now Ledger Wallet)Trezor SuiteOKX WalletBitget WalletUniswap web app + Uniswap WalletRainbow Wallet

Something wrong or out of date? Send a correction with a link to the vendor's docs. Not financial advice. How we check.