Axiom Trade Chrome extension: what is official and what is risky

People searching for an Axiom Trade Chrome extension usually want faster buttons, extra token data or a simulated balance on top of the site. None of that comes from Axiom. As of September 17, 2026, no official Axiom extension exists in any official material, and a security report published this month showed third-party extensions stealing logged-in Axiom sessions. This page explains what is out there, how the theft worked, and how to limit the damage if you decide to use an extension anyway.

Is there an official Axiom Trade Chrome extension?

No official Axiom Trade extension was found. Axiom's homepage, docs index, Terms and in-app changelog do not mention a browser extension, a mobile app or an APK. Axiom is delivered as a website at axiom.trade, and its releases are logged in the in-app changelog, where no extension has ever appeared.

This conclusion is based on absence: Axiom has not, that we found, published a statement saying it has no extension. But an official one would be announced on axiom.trade and by @AxiomExchange on X. A Chrome Web Store listing with the Axiom logo proves nothing, because anyone can upload a listing that uses a brand name.

What do third-party Axiom extensions do?

Third-party Axiom extensions add features on top of the axiom.trade page inside your browser. Examples include Chrome extensions named Axiom Enhancer and Axiom Tools, plus several paper-trading overlays that show a simulated balance. Tools of this kind typically promise extra statistics on token pages, custom hotkeys, wallet labels or practice trading.

To do any of that, the extension must run its code inside the Axiom tab while you are logged in. We are not saying the named tools are malicious. The point is structural: every one of them sits in the same position that the malicious extensions below used. Axiom does not endorse, review or support any of them, so if one goes wrong there is no one to appeal to. Our paper trading guide covers the simulator extensions and safer ways to practice.

What did the Socket report find about Axiom extensions?

Socket, a software supply-chain security company, reported on September 9, 2026 that a group of Chrome and Firefox extensions stole authenticated session data from Axiom users. The extensions it named were J7Tracker, VREO, Orbit Tracker, GhostApe and GhostApe Color.

• The extensions collected session data and tokens from logged-in Axiom accounts.
• Both Chrome and Firefox users were affected.
• The Chrome listings were removed in July 2026.
• Socket said Orbit Tracker's Firefox listing was still live on its publication date.

Removal from a store does not uninstall an extension from browsers that already have it. If any of those names appear in your extension list, go straight to the recovery steps further down this page. The report also cites Axiom's scale, more than 47,000 daily active traders by early August 2026, which helps explain why attackers bother building tools aimed at this one site.

How can an extension take over a logged-in Axiom session?

An extension with permission to "read and change your data" on axiom.trade can read what the page holds, including the session data that keeps you logged in, and send it elsewhere. With a copy of that session, an attacker's browser looks like yours. No email code, Google password or seed phrase is needed.

This matters more on Axiom than on a read-only site. Axiom's wallet is non-custodial and secured through Turnkey, and Turnkey's case study describes policy-based signing that lets Axiom run automated actions such as limit orders. The flip side is that a logged-in session is able to trade. Someone holding your session can buy a worthless token they control with your balance, which moves your money to them through an ordinary-looking swap.

Three details make extensions harder to judge than they look:

• Updates are silent. An extension that was clean when you installed it can change behavior in a later version.
• Ownership changes. Popular extensions get sold, and the new owner inherits every installed browser.
• Broad permissions are common. "All sites" access means the extension also sees your email, exchange accounts and any wallet web pages.

This is the same risk behind the login threats described in our Axiom login safety guide: the account is only as safe as the browser it runs in.

Safety checklist if you still want to use an Axiom Trade extension

The safest number of Axiom extensions is zero. If you decide the convenience is worth it, reduce what a bad extension could reach.

1. Use a separate browser profile. Create a profile used only for the extension and Axiom. Keep your email, exchanges and main wallets in a different profile where the extension is not installed.
2. Use a low-balance wallet. Axiom supports up to 25 active wallets. Keep the account you expose to extensions funded only with what you can afford to lose entirely.
3. Review permissions before and after installing. In Chrome, open the extension's details and look at "Site access". Prefer "on specific sites" or "on click" over "on all sites", and walk away if an overlay tool asks for more than it needs.
4. Check the publisher and history. Look for a named developer, a privacy policy, a long update history and independent discussion. A high rating alone is weak evidence, since ratings can be bought.
5. Remove what you do not use. Audit your extension list monthly. Every unused extension is risk with no benefit.
6. Never enter a seed phrase into an extension overlay. Nothing legitimate on Axiom requires it.

What to do if you installed a suspicious extension

Act as if the session was copied, because you cannot verify that it was not. Speed matters more than certainty.

1. Remove the extension. Open your browser's extensions page and remove it, along with anything else you do not recognize.
2. Log out of Axiom in that browser. This should end that session. We could not confirm whether Axiom offers a control that ends all sessions everywhere, so ask about it in your support ticket.
3. Move funds to a fresh wallet. From a clean browser profile or another device, move your assets to a new wallet whose seed phrase has never been stored or typed on the affected computer.
4. Secure the login itself. Change the password on the email or Google account you use for Axiom and review its recent sign-in activity.
5. Review account activity. Look through recent trades, open limit orders and transfers for anything you did not place, and cancel unknown orders.
6. Open an official ticket. Support runs through tickets in Axiom's Discord. The steps are on our Axiom support page. Expect fake "recovery agents" to contact you after you post publicly; staff never DM first.

Be realistic about outcomes. On-chain transactions cannot be reversed, and Axiom's Terms say it does not hold your keys. Support can document the incident, but nobody can pull tokens back from an attacker's wallet.

Do you need an extension at all?

Usually not. Much of what extensions advertise overlaps with features Axiom has built into the site, which carry no extra session risk.

• Token filtering: Pulse has filters for age, holder concentration, developer holdings, snipers, insiders, bundles, liquidity and volume, with import and export of filter sets.
• Wallet and social tracking: the built-in trackers follow up to 500 wallets and monitor X accounts. See the Axiom tools overview.
• Speed: Instant Trade gives a floating one-click panel with hotkeys next to the chart.
• Alerts: price alerts can notify you through Discord or Telegram.

If an extension's main selling point is already in that list, the trade is extra risk for very little gain.

Sources: Socket: Chrome and Firefox extensions stealing crypto data, September 9, 2026; Turnkey case study on Axiom; Axiom docs: Support. Axiom homepage, docs and changelog checked September 17, 2026.