# Larp wallet on GitHub: a survey of the repos and a safe way to approach them Source: https://flexdger.com/blog/larp-wallet-github Updated: 2026-11-01 Published: 2026-11-01 Topic: Crypto wallet mockups (https://flexdger.com/blog/crypto-wallets) > Larp wallet on GitHub: what a search found on 31 Oct 2026, the documented fake-repo campaign that stole crypto, how to vet a repo, and a no-clone option. GitHub has plenty of homemade larp wallets: imitation Ledger, Phantom, Exodus and Coinbase screens, a browser extension, a userscript. We surveyed the search results on 31 October 2026 without running anything. This page lays out what turned up, why the code you run matters more than the idea of a fake wallet, a documented campaign of poisoned repositories, a vetting routine, and an option that needs no cloning at all. **Short answer:** Yes, GitHub is full of small larp wallet projects: a search on 31 October 2026 returned 61 repositories, and we ran none of them. The danger is the code you execute, not the idea. Kaspersky documented hundreds of fake repositories carrying crypto stealers. Read first, isolate it, never type a seed phrase. A screen is never proof of funds. ## Start with the right worry A fake wallet screen is harmless on its own. The trouble starts when you run code written by a stranger on a computer that also holds real wallets and logins. Everything on this page follows from that one distinction. For context, a larp wallet (a crypto wallet app simulator) draws a wallet screen that reads as real from figures you type: for a video, a sketch, a pitch deck or a demo. It holds nothing and never reads a chain. ## What we saw in the search results We searched GitHub on 31 October 2026 and read the listings. We did not download, install or run anything, and we say nothing about the contents of these repositories beyond what their pages state. ### Repository search for "larp wallet" The search returned 61 repositories. The first page held a role-play clone of Ledger Live with 30 stars, a Phantom look-alike, a fake Ledger Live-style app, an Exodus-style page you can view straight on its GitHub page, a Chrome extension modeled on Phantom, a multi-skin wallet simulator built as a web app, and a userscript for the Coinbase wallet site. Most had between 2 and 4 stars. ### The topic "transaction-simulation" This topic listed 38 repositories. Most are genuine security tools that preview a transaction before you sign it. The rest are wallet-screen tools, among them one with 144 stars described as a wallet UI simulation tool, and six repositories sharing a name and description, posted from different accounts with one to four stars each. Two observations. Nearly all of them imitate a real brand's interface, which can bring a maker trademark trouble. And one project reposted under several accounts shows how cheap copies are, which is why a star count says little. ## What "open source" does and does not promise It means the code is readable, not that anybody has read it. A page of static HTML and CSS has little room to hide anything, so reading it is realistic. An extension or a userscript is another matter: it runs inside your browser alongside your real sites. An extension asks for permissions, and a userscript aimed at a wallet site can read and rewrite that page. The more the code can reach, and the more your browser profile contains, the bigger the exposure. ## A documented case: fake repositories that steal In February 2025, Kaspersky described a campaign it named GitVenom. Hundreds of GitHub repositories posed as ordinary software, for example a Telegram bot for managing bitcoin wallets and a tool for automating Instagram. Inside were info-stealers that harvest saved credentials, wallet data and browsing history, remote access trojans, and clipboard hijackers. The repositories were dressed up with inflated commit counts and polished instruction files so they looked alive. At least one victim lost 5 BTC to a hacker-controlled wallet in November 2024. Cointelegraph reported on it on 26 February 2025. The same toolkit shows up in smaller ways: - **Clipboard hijackers** notice a copied wallet address and swap in the attacker's. You paste, you send, and the funds land elsewhere. - **Install scripts** run a command during installation, and that command can fetch anything. Read the scripts section before you install. - **A README that sends you to download a build** from another site, instead of building from the code, is a red flag. - **A prompt for a seed phrase** is the trap. A larp wallet holds no funds and has no use for one. ## A routine before you touch a repo 1. **Open the code files first.** The README is the sales pitch. 2. **Study the owner.** Account age, other projects, and whether the same project appears under other names. 3. **Judge the commit history.** Real projects change real things over time. Thousands of tiny commits, or one file touched every few minutes, should worry you. 4. **Favor plain static pages.** If it opens as a web page with no build step and no dependencies, you can read all of it in minutes. Some Exodus-style projects we saw could be viewed right on their GitHub page. 5. **Check dependencies and scripts.** A long dependency list or an install script earns a closer look. 6. **Isolate.** A separate browser profile or a virtual machine, with no wallet extension, no saved passwords and no real accounts. 7. **Keep keys out and funds elsewhere.** If anything asks for a seed phrase, close it. ## If you only need a screen, skip the repo For a clip rather than a coding project, nothing needs cloning, building or vetting. Flexdger Wallet is a hosted web app: open it in a browser, add it to your home screen, enter your tokens and amounts, and it draws the screen full size with live prices on five built-in tokens. It is a paid product, monthly or once for life, with a demo to open first, and it never requests a key or recovery phrase. We offer no repository to run, so judge it by what it asks of you: no download, no key, no extension. The homepage shows it moving, and [larp wallet apps compared](https://flexdger.com/blog/larp-wallet-apps-compared) lists the other choices. We are not affiliated with Ledger or any wallet maker. For a Ledger-style look, see [Ledger larp wallet](https://flexdger.com/blog/ledger-larp-wallet). ## Prop, not proof A wallet screen from GitHub or from an app is a prop for a video, a skit or a demo. It is never evidence of a balance or a payment, and showing it to someone to obtain money or trust is a false statement, whichever tool drew it. ## Sources - [GitHub repository search for larp wallet](https://github.com/search?q=larp+wallet&type=repositories), read 31 October 2026 - [GitHub topic transaction-simulation](https://github.com/topics/transaction-simulation), read 31 October 2026 - [Kaspersky Securelist, fake GitHub projects spreading stealers in the GitVenom campaign](https://securelist.com/gitvenom-campaign/115694/), February 2025, also reported by Cointelegraph on 26 February 2025 - [GitHub Docs, GitHub security features](https://docs.github.com/en/code-security/getting-started/github-security-features), read 31 October 2026 ## Questions ### Are there open source larp wallets on GitHub? Plenty of small ones. On 31 October 2026 a repository search for larp wallet gave 61 results, including role-play clones of Ledger Live, a Phantom look-alike, an Exodus-style page, a multi-skin web app and a Chrome extension. Licenses vary and we did not check them. Popularity is low: the top result we saw had 30 stars. ### Should I clone and run one? Only as far as you trust the code, and you cannot judge that without reading it. A repository can look polished and still contain a script that fetches a stealer, a pattern Kaspersky documented in 2025. Read the files, use a throwaway browser profile with no wallet extension, and never enter a key. ### Could a fake wallet repo drain my crypto? A static page cannot touch your wallet, but anything you install or execute can. Kaspersky reported fake GitHub projects carrying info-stealers that take saved credentials and wallet data, and clipboard hijackers that swap a copied address for the attacker's. Cointelegraph relayed the findings, including one victim who lost 5 BTC. ### What should I look at before running a repo? Skip the README and read the code. Check the age of the account and what else it has published, scan the commit history for a plausible rhythm, read any install scripts, and refuse a README that sends you to download a file hosted elsewhere. Run it in a virtual machine or fresh profile that holds no real wallet. ### Do I have to clone anything to get a larp wallet screen? No. A browser-based larp wallet gives you the screen with nothing to clone, build or install. Flexdger Wallet is one: a hosted web app you can add to your home screen, sold monthly or once for life, with no recovery phrase and no download. It is a hosted product, not a repository. ### Does a GitHub wallet screen prove I own money? No. A fake wallet screen from any source, open source or not, is a prop for a video, a skit or a demo. Shown to someone as a real balance to win money or trust, it is a false statement no matter which tool drew it.