Kerberus Acquires Refract to Build First Crypto Antivirus

Kerberus Cyber Security, a leading cryptocurrency security platform, has announced the acquisition of Refract, the developer of the browser extension Pocket Universe, in a seven-figure deal aimed at developing the first dedicated antivirus for the crypto industry [1]. The acquisition, confirmed on August 16, 2025, is a strategic expansion for Kerberus, which previously focused on real-time transaction scanning and automated wallet defenses [2]. With the integration of Pocket Universe, Kerberus plans to enhance its existing Sentinel3 browser extension and extend its security framework to all Ethereum Virtual Machine (EVM) chains and Solana [3].

The move comes in response to a rising number of malware attacks in the crypto space, despite Kerberus’ track record of eliminating scams for users with zero losses over the past two years [4]. While many products in the market refer to themselves as “crypto antivirus,” Kerberus CEO Alex Katz clarified that the company is developing a true antivirus in the traditional sense—a software that users can install on their devices to provide protection [5]. The company’s chief technology officer, Danor Cohen, estimated that it will take at least four months to develop a minimal viable product [6].

Following the acquisition, Pocket Universe’s co-founders, Justin Phu and Nishan Samarasinghe, will transition into advisory roles, supporting Kerberus as it works to build out its new security infrastructure [1]. Strategic adviser Ran Neuner, also CEO of Onchain Capital and founder of Crypto Banter, has joined to strengthen Kerberus’ outreach and distribution capabilities [2]. The leadership shift is part of a broader strategy to centralize innovation under Kerberus, ensuring a more cohesive and scalable approach to crypto security.

Industry experts have pointed out that the crypto sector lacks a unified antivirus solution and currently relies on fragmented, siloed defenses [7]. Unlike traditional antivirus software, which can quarantine threats before damage occurs, in the blockchain environment, once a malicious transaction is executed or funds are moved, the damage is typically irreversible. This makes wallet-level protections and coordinated security measures critical.

Kerberus has emphasized its commitment to user privacy, stating that it never requests access to private keys or user funds and limits its monitoring to Web3 sites [4]. The company’s approach reflects over 18 years of experience in cybersecurity, adapting traditional security principles to the unique challenges of the crypto ecosystem.

As Kerberus moves forward with the project, it has also issued warnings about potential “antivirus” scams. Lucien Bourdon, a Bitcoin analyst at Trezor, advised users to remain cautious about fake crypto antivirus apps that could pose their own threats [5]. Bourdon noted that in the crypto space, the most significant threats are not always traditional malware but rather scams like address poisoning and phishing.

The acquisition highlights a growing awareness of security vulnerabilities within the crypto industry and signals a shift toward more comprehensive and integrated security solutions [3]. As Kerberus continues to develop its platform, it aims to set a new standard for protection in the decentralized financial landscape.

Source:

[1] https://cointelegraph.com/news/kerberus-pocket-universe-acquisition-crypto-antivirus

[2] https://www.bitcoinsensus.com/news/business/crypto-first-antivirus-kerberus-makes-a-bold-bet

[3] https://www.bitget.com/news/detail/12560604923439