Vulnerability fixed, no compensation reported
From January 21 to 24, 2025, crypto wallet extensions that users installed or updated in AdsPower were replaced with malicious versions.
Who was affected
> 34,000 wallets
Losses
≈ $4.7 million
Free plan — 2 profiles, no time limit
AdsPower is an antidetect browser from Singapore-based SUNFLOWER TECH with two browser engines: SunBrowser, built on Chromium, and FlowerBrowser, built on Firefox. The free plan includes 2 profiles with no time limit. For $9 per month, you get 10 more, while the RPA builder and window synchronizer are also available on the free plan. It’s a good fit for teams automating account workflows: AdsPower offers a documented Local API, support for Selenium, Puppeteer, and Playwright, plus a dedicated CLI.
We haven’t run our own tests yet. In public tests (25 results, checked on October 9, 2026), it passed 3 of 6 tested fingerprint checkers.
| Plan | Per month | Profiles | Team members | Per profile |
|---|---|---|---|---|
| Free | free | 2 | 1 | — |
| Professional 2 + 10starting price in the ranking | $9 | 12 | 1 | $0.75 |
| Professional 2 + 20 | $12 | 22 | 1 | $0.55 |
| Professional 2 + 50 | $21 | 52 | 1 | $0.40 |
| Professional 2 + 100 | $36 | 102 | 1 | $0.35 |
| Business 2 + 200 | $61 | 202 | 1 | $0.30 |
| Business 2 + 500 | $126 | 502 | 1 | $0.25 |
| Business 2 + 1000 | $197 | 1002 | 1 | $0.20 |
Free plan available. Prices are in the service’s currency for monthly billing; annual billing is cheaper.
Found the right plan? Start with the entry-level plan — you can upgrade anytime.
Open adspower.comScore based on public tests from reviews, research, and benchmarks, checked October 9, 2026. The calculation includes 25 results of 53 found: we do not count the vendor’s claims about itself or checks on other services. Passes 3, partially passes 1, and fails 2 out of 6 tested checkers. We have not run our own test yet.
Tests are published by different parties: independent reviewers, partners, and competitors. Independent and recent tests carry more weight, while competitor and partner tests carry less; when there are few external results, the score trends toward 50, meaning “not proven.”
All browsers matrixOne case, January 2025. Below is what happened, who was affected, and what the company did.
Vulnerability fixed, no compensation reported
From January 21 to 24, 2025, crypto wallet extensions that users installed or updated in AdsPower were replaced with malicious versions.
Who was affected
> 34,000 wallets
Losses
≈ $4.7 million
Not a service breach, but worth knowing
Fake websites and installers were distributed under the AdsPower name. In 2022, the company warned about the phishing site ads-power.org, which hosted an infected version of the program. In December 2025, it reported that it had gotten more than ten fake websites taken down. In July 2026, it said that since the end of October 2025, it had identified 37 suspicious websites and reported them to registrars and hosting providers. The official addresses are adspower.com, adspower.net, and the Russian-language adspower-ru.com.
Since August 13, 2024, AdsPower has run a public bug bounty program. Reports are accepted at [email protected], and the scope covers *.adspower.com, *.adspower.net, and the client application. According to the company, before launching the program, it worked with the Huoxian platform to identify and fix dozens of vulnerabilities and paid researchers around $6,000. We found no reports that these vulnerabilities had been exploited.
The company stated that it had passed a SOC 2 Type II audit. According to the company, an independent auditing firm issued the report based on AICPA criteria covering a 12-month period, with no qualifications. The auditor’s name and the report itself have not been disclosed. AdsPower’s homepage also mentions ISO 27001 and ISO 27701 certificates, but we have not seen the certificates themselves.
We count breaches and leaks on the service’s side, attacks through updates and extensions, account takeovers, and hacking attempts reported by the company itself. Brand impersonation, unverified complaints, patched vulnerabilities that were not exploited, DDoS attacks without data leaks, and account bans by platforms are not included in the incident count; they appear in the “Worth knowing” section. Checked October 10, 2026.
The score is based on publicly available tests by other authors, each using their own setup and test date. Your proxies, accounts, and workflows may produce different results.
In September, AdsPower updated its Chrome engine twice, added Firefox 153, increased API request limits, and doubled the limit for permanent profiles to 20.
The AdsPower AI agent creates profiles, logs into accounts, publishes posts, and collects data from text commands. It runs on credits, starting at $3 for 200.
The AdsPower Browser app in the App Store creates, edits, and opens iOS profiles, checks proxies, and syncs with the desktop client.
Showing 10 of 99
Really good browser - it was enough for my basic needs. There are still quite a few inconveniences that could be fixed, though.
So far so good; above all, customer support is quick and helpful.
They're scammers, be careful. I don't recommend this in any way.
Great tool for managing and handling multiple social media profiles.
I bought an AdsPower subscription expecting a reliable anti-detect browser, but from day one the WebGL and WebGPU parameters were inconsistent and failed independent fingerprint checks. Support spent over 10 days sending copy-paste replies and repeating basic troubleshooting while my paid subscription kept running and I burned over 5GB of separately paid proxy bandwidth on tests. When I asked for a refund for the wasted period and the bandwidth, they flatly refused, even though the defect was theirs.
Worst support I've ever had: I paid for a subscription but it still showed $0, support said the only option was a refund, and I had already lost money on crypto conversion fees. Two days later it still wasn't resolved - the whole day, within their working hours, I only got 'support is on break right now', Telegram support didn't answer either, and I urgently needed a locked profile. I'm moving all my profiles to Dolphin Anty, and I suspect most positive ratings here are fake. Update: I finally got the refund after a lot of struggle, but I'm keeping 2 stars for the trouble.
Pretty shitty - it doesn't work. I opened a support ticket; there are much better and cheaper competitors out there.
Affordable, reliable, and packed with enough features, it’s the best choice for beginners.
Automatically translated ·
It doesn't work at all: after downloading the browser and creating a new profile, I still had the same IP address I was already using.
Tell us about your experience: how many profiles you use, what you use them for, and what went wrong. We read reviews manually and don't publish promotional content or reviews without specific details.
Best proxy provider out there; customer service is a bit tough, but otherwise awesome.