1inch Ios Security Report background image
Home - Coinspect Security
1inch1inchiOS
Search
1inch logo

1inch

Also on Android Android
Security Score

75.9

dApp Permissions

28.2 / 35
  • Pass Confirmation for requests from WalletConnect
    9.0 / 9.0 Expand details
    Description

    Requires user confirmation for requests from WalletConnect before granting dApp access to specific RPC methods.

    • Requires user confirmation before processing each dApp request to the following RPC endpoints.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-ec45161d.png
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass User confirmation for requests from embedded browser
    7.9 / 7.9 Expand details
    Description

    Requires user confirmation before processing privileged RPC requests from embedded browsers.

    • Requires user confirmation before processing each dApp request to the specified RPC endpoints.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-512ea7ba.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Wallet unlock before requests
    5.5 / 5.5 Expand details
    Description

    Requires users to unlock it before processing dApp requests when in a locked state.

    • Implements WalletConnect and, when locked, requires users to unlock the wallet before processing requests from dApps.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-60831320.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Mismatching EIP-712 chainId detection
    0.0 / 3.5 Expand details
    Description

    Alerts users or rejects signing EIP-712 messages with a mismatched chain ID.

    • The wallet does not refuse to sign EIP-712 messages when the chain ID differs from the currently active chain.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-4752848d.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass eth_sign method disabled
    3.3 / 3.3 Expand details
    Description

    Restricts the use of the deprecated and insecure eth_sign method by default.

    • The eth_sign method is disabled by default, and the wallet uses personal_sign, converting the message to bytes.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    1inch-ios-4.4.2-bb993258.jpg1inch-ios-4.4.2-b3c0d60a.png
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Mismatching SIWE domain detection
    0.0 / 1.8 Expand details
    Description

    Warns users when the domain in a Sign-In with Ethereum (EIP-4361) message does not match the requesting dApp's origin.

    • The wallet doesn't warn users of domain or scheme mismatches when signing an EIP-4361 message.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-20f7c846.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Connected dApp management
    1.5 / 1.5 Expand details
    Description

    Allows users to list and revoke connected dApps.

    • It shows all connected DApps and also the chance to revoke access to them

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-6bede498.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Token approval management
    0.0 / 1.5 Expand details
    Description

    Allows users to view and revoke token approvals.

    • The wallet lacks the functionality to revoke token approvals.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-15952f13.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass User confirmation before switching chains
    1.1 / 1.1 Expand details
    Description

    Requires user confirmation before switching the active chain.

    • It does not require user confirmation before executing the method, but shows the connected chains in the connect dialog.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 5 screenshots
    1inch-ios-4.4.2-f575ba25.jpg1inch-ios-4.4.2-ddf8641c.jpg1inch-ios-4.4.2-f8390de9.png1inch-ios-4.4.2-21478cf1.png1inch-ios-4.4.2-4e8c3943.png
    Last updated on Nov 14, 2025
    Report an issue Report an issue with this check

Intent Verification

18.3 / 25
  • Pass Transaction simulation
    6.7 / 6.7 Expand details
    Description

    Previews the expected outcome by simulating the request execution on the blockchain before signing.

    • Displays the NFT by attempting to provide liquidity into a liquidity pool and doing a swap shows the outcomes and incomes.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-7495980a.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Clear token approval dialog
    6.7 / 6.7 Expand details
    Description

    Clearly displays all the key details for ERC-20 Approve requests.

    • It shows the contract address, token, effect, allowance, and contract spender address. The contract address and spender are clickable.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-7e85a630.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Clear message signing dialog
    3.8 / 3.8 Expand details
    Description

    Clearly displays all message signature request details without truncating or hiding information.

    • The wallet displays all information in a simple JSON format. The screenshots include one from OpenSea, another of an ERC-20 SignV4, and a personal_sign request containing a large message.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 5 screenshots
    1inch-ios-4.4.2-84b22a8b.jpg1inch-ios-4.4.2-fdd6abd1.jpg1inch-ios-4.4.2-f331f98a.jpg1inch-ios-4.4.2-a91a0b8b.jpg1inch-ios-4.4.2-45cce932.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail EIP-712 message parsing
    0.0 / 2.4 Expand details
    Description

    Displays human-readable details for EIP-712 signature requests from well-known protocols.

    • The wallet does not parse EIP-712 objects for well-known contracts or protocols, such as ERC-20 Permits, nor does it parse or provide detailed information for OpenSea Seaport listings.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 4 screenshots
    1inch-ios-4.4.2-33bb1881.jpg1inch-ios-4.4.2-76027e76.jpg1inch-ios-4.4.2-f311c538.jpg1inch-ios-4.4.2-fce71d13.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Invalid address checksum detection
    0.0 / 2.2 Expand details
    Description

    Warns users when they input addresses with invalid EIP-55 checksums.

    • It doesn't show any warning about incorrect address checksums and fixes the address, letting you confirm the transaction.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    1inch-ios-4.4.2-d7a58a5f.jpg1inch-ios-4.4.2-5beed07d.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Mandatory message review
    0.0 / 2.1 Expand details
    Description

    Requires users to review all the details before signing a message.

    • Sign button is available from the start

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    1inch-ios-4.4.2-10c242d5.jpg1inch-ios-4.4.2-86d8ec9e.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Links to blockchain explorers
    1.2 / 1.2 Expand details
    Description

    Consistently provides clickable links to block explorers for all key blockchain identifiers.

    • The wallet includes clickable links in the transaction history and during the process of sending a transaction.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    1inch-ios-4.4.2-552850b9.jpg1inch-ios-4.4.2-d9acac93.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check

Physical Access

12.6 / 20
  • Pass Seed phrase access control
    5.4 / 5.4 Expand details
    Description

    Requires authentication to access seed phrases or private keys.

    • After clicking the 'View Recovery Phrase' button, the wallet requires a password to display the mnemonics or private keys.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-0ce351f1.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Manual wallet lock
    0.0 / 3.9 Expand details
    Description

    Allows users to lock it manually.

    • The wallet does not include a “Lock” button; it only provides a “Delete Account” option.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    1inch-ios-4.4.2-f30b7c4b.jpg1inch-ios-4.4.2-76917de5.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Automatic wallet lock
    3.9 / 3.9 Expand details
    Description

    Verifies wallet auto-locks on inactivity, device lock, or background.

    • The wallet automatically locks immediately when you switch to another app, and this setting cannot be modified.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-2c45ab12.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Robust Authentication
    3.3 / 3.3 Expand details
    Description

    Uses strong authentication, such as resistance to trivial or commonly-used passwords. Including biometrics and rate limiting in mobile.

    • The wallet supports Face ID, allows simple passwords, and rate-limits login attempts after five failed attempts.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    1inch-ios-4.4.2-eee8fd31.jpg1inch-ios-4.4.2-1fbe6e64.jpg1inch-ios-4.4.2-c5ab2350.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Clipboard seed phrase leak prevention
    0.0 / 1.8 Expand details
    Description

    Limits exposure of secrets by restricting or warning on copying seed phrases or taking screenshots.

    • The wallet allows users to copy words without any warning for over a minute; however, if a screenshot is taken, it displays a warning indicating that it may not be safe.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    1inch-ios-4.4.2-f6c2b5a9.jpg1inch-ios-4.4.2-c5849dbf.jpg1inch-ios-4.4.2-a1b6ce05.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Seed phrase access warning
    0.0 / 1.8 Expand details
    Description

    Warns users of the risk before allowing access to seed phrases or private keys.

    • During the mnemonic viewing process, it warns you not to share your secret words or private keys. However, it doesn't explain the risks of doing so.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-1894f438.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check

Threat Prevention

16.7 / 20
  • Pass Phishing dApp detection
    5.1 / 5.1 Expand details
    Description

    Prevents or alerts users about interactions with a known malicious URL.

    • The wallet alerts users about connections to known phishing dApps like https://arbitrum-token-bridge-cqjggprvn-offchain-labs.vercel.app/

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 4 screenshots
    1inch-ios-4.4.2-e97a247c.jpg1inch-ios-4.4.2-8e34a969.jpg1inch-ios-4.4.2-66a3ba3e.jpg1inch-ios-4.4.2-77ab8d12.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Malicious address detection
    5.1 / 5.1 Expand details
    Description

    Prevents or alerts users about interactions with a known malicious address.

    • The wallet alerts users about interactions with known phishing or scam addresses.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    1inch-ios-4.4.2-b64898bf.jpg1inch-ios-4.4.2-d8d68082.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Trusted dApp detection
    0.0 / 3.3 Expand details
    Description

    Informs users when interacting with a trusted dApp URL.

    • The wallet does not notify users when interacting with well-known or verified URLs (dApps) such as Uniswap.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    1inch-ios-4.4.2-7149f540.jpg1inch-ios-4.4.2-c9f1db45.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Unknown address detection
    2.8 / 2.8 Expand details
    Description

    Warns users when interacting with an unknown address.

    • The wallet displays a warning when users interact with unknown or untrusted addresses

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-9628ebfd.jpg
    Last updated on Nov 17, 2025
    Report an issue Report an issue with this check
  • Pass Full dApp URL display
    1.5 / 1.5 Expand details
    Description

    Clearly displays the full dApp URL in the connection prompt.

    • The wallet displays the DApp origin URL in the 'Connect' dialog.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-a03af918.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Malicious or spam token filtering
    1.3 / 1.3 Expand details
    Description

    Hides malicious tokens and NFTs by default.

    • The wallet hides spam or scam tokens and NFTs sent to the wallet.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-3c5588b6.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass dApp access disclosure dialog
    1.0 / 1.0 Expand details
    Description

    Informs dApp access to balances, history, and signing requests on connection.

    • The waller informs users to view their wallet balance and activity or request transaction approvals.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    1inch-ios-4.4.2-b87ac076.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check

This ranking is for informational purposes only. It should not be relied on to provide legal, tax, financial, investment, or other types of advice. Coinspect does not guarantee or warrant the accuracy, completeness, timeliness, suitability, or validity of the information provided and will not be responsible for any claim attributable to reliance on errors, omissions, or other inaccuracies of any part of such information.