Exodus - Movement Exod

It certainly doesn’t look official to me, based on the following simple check:

  • The upstream Exodus app is available as a deb and zip. Inside those packages there’s an electron app.
  • The exodus snap is a flutter application, not built using electron.

So it could be someone making their own Exodus application, it doesn’t look official.

I installed the snap in a separate VM. It opens with a “Restore Wallet” dialog. If I enter random letters, it connects to some API at https://www.exchangerate-api.com/ and fails (because I didn’t enter a real wallet phrase).

Sadly, looks very dodgy.

I’ve sent an email to the security team. Also @security ^^

2 Likes