zerohash lets an authorized host page programmatically drive a user's already-authenticated Exchanges session — reading balances and deposit addresses, and initiating withdrawals — without the host page or extension ever handling Exchange credentials.
