Family Ios Security Report background image
Home - Coinspect Security
FamilyFamilyiOS
Search
Family logo

Family

Security Score

70.2

dApp Permissions

32.1 / 35
  • Pass Confirmation for requests from WalletConnect
    9.0 / 9.0 Expand details
    Description

    Requires user confirmation for requests from WalletConnect before granting dApp access to specific RPC methods.

    • Implements Wallet Connect and requires users to confirm the wallet to process requests.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-a6b360ac.png
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass User confirmation for requests from embedded browser
    7.9 / 7.9 Expand details
    Description

    Requires user confirmation before processing privileged RPC requests from embedded browsers.

    • Has embedded browser and requires user confirmation before processing each DApp request

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-b8f7d113.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Wallet unlock before requests
    5.5 / 5.5 Expand details
    Description

    Requires users to unlock it before processing dApp requests when in a locked state.

    • The wallet supports WalletConnect but is not locked by default. You can enable the lock option in settings, and once activated, it requires Face ID or a passcode to process requests.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-0f1d6d3e.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Mismatching EIP-712 chainId detection
    3.5 / 3.5 Expand details
    Description

    Alerts users or rejects signing EIP-712 messages with a mismatched chain ID.

    • The wallet doesn't warn the user when DApp is trying to use a chain ID different from the active chain but prevents the request.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    family-ios-0.2.1-14f879d0.jpgfamily-ios-0.2.1-9e8ab440.png
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass eth_sign method disabled
    3.3 / 3.3 Expand details
    Description

    Restricts the use of the deprecated and insecure eth_sign method by default.

    • With the 'eth_sign' method, Wallet used personal_sign, converted to bytes.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    family-ios-0.2.1-5bedcfb3.jpgfamily-ios-0.2.1-0a02ef50.png
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Mismatching SIWE domain detection
    0.0 / 1.8 Expand details
    Description

    Warns users when the domain in a Sign-In with Ethereum (EIP-4361) message does not match the requesting dApp's origin.

    • Doens't warns users of a domain or scheme mismatch when signing an EIP-4361 (sign in with Ethereum)

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    family-ios-0.2.1-ecbae799.jpgfamily-ios-0.2.1-692b15d5.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Connected dApp management
    1.5 / 1.5 Expand details
    Description

    Allows users to list and revoke connected dApps.

    • It shows all connected DApps and also the chance to revoke access to them

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-ec06f80e.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Token approval management
    1.5 / 1.5 Expand details
    Description

    Allows users to view and revoke token approvals.

    • The wallet clearly allows us to handle the approvals

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    family-ios-0.2.1-ce6b70d4.jpgfamily-ios-0.2.1-afc42411.jpgfamily-ios-0.2.1-5e3e453f.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail User confirmation before switching chains
    0.0 / 1.1 Expand details
    Description

    Requires user confirmation before switching the active chain.

    • It doesn´t require user confirmation before processing the method

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-8906711d.jpg
    Last updated on Nov 14, 2025
    Report an issue Report an issue with this check

Intent Verification

16.9 / 25
  • Pass Transaction simulation
    6.7 / 6.7 Expand details
    Description

    Previews the expected outcome by simulating the request execution on the blockchain before signing.

    • It clearly shows the NFT we are receiving when providing liquidity to a pool.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-d9e695e3.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Clear token approval dialog
    6.7 / 6.7 Expand details
    Description

    Clearly displays all the key details for ERC-20 Approve requests.

    • Include details such as the contract address, token, effect, allowance, and contract spender address.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    family-ios-0.2.1-5d1ad9fb.jpgfamily-ios-0.2.1-c5aaddba.jpgfamily-ios-0.2.1-36534b61.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Clear message signing dialog
    0.0 / 3.8 Expand details
    Description

    Clearly displays all message signature request details without truncating or hiding information.

    • It doesn't include all the required information, such as the verifying contract. It only shows the message section.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 5 screenshots
    family-ios-0.2.1-5d7869cd.jpgfamily-ios-0.2.1-a8d5933f.jpgfamily-ios-0.2.1-4b275620.jpgfamily-ios-0.2.1-76cc2cac.jpgfamily-ios-0.2.1-48cadf92.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass EIP-712 message parsing
    2.4 / 2.4 Expand details
    Description

    Displays human-readable details for EIP-712 signature requests from well-known protocols.

    • With OpenSea, the wallet displays plain data; however, when signing an ERC-20 Permit, it correctly parses the information.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 5 screenshots
    family-ios-0.2.1-5377a3ff.jpgfamily-ios-0.2.1-8ab478c2.jpgfamily-ios-0.2.1-cea64123.jpgfamily-ios-0.2.1-11120048.jpgfamily-ios-0.2.1-1272b461.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Invalid address checksum detection
    0.0 / 2.2 Expand details
    Description

    Warns users when they input addresses with invalid EIP-55 checksums.

    • Doesn't warn users when providing addresses with invalid checksums (EIP-55 address checksum) and fixes the address while doing the transaction with the app.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    family-ios-0.2.1-70817e66.jpgfamily-ios-0.2.1-8c68beee.jpgfamily-ios-0.2.1-45118d94.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Mandatory message review
    0.0 / 2.1 Expand details
    Description

    Requires users to review all the details before signing a message.

    • The sign button is available from the start

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 4 screenshots
    family-ios-0.2.1-a4934fe5.jpgfamily-ios-0.2.1-d912b208.jpgfamily-ios-0.2.1-452c5a02.jpgfamily-ios-0.2.1-3d999660.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Links to blockchain explorers
    1.2 / 1.2 Expand details
    Description

    Consistently provides clickable links to block explorers for all key blockchain identifiers.

    • Includes clickable links in account activity and transactions

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    family-ios-0.2.1-b2943ca5.jpgfamily-ios-0.2.1-a57eb74c.jpgfamily-ios-0.2.1-691cb245.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check

Physical Access

10.5 / 20
  • Pass Seed phrase access control
    5.4 / 5.4 Expand details
    Description

    Requires authentication to access seed phrases or private keys.

    • Wallet requires Face ID to display mnemonics/private keys

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-15e144d3.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Manual wallet lock
    0.0 / 3.9 Expand details
    Description

    Allows users to lock it manually.

    • The wallet lacks a manual lock feature. Instead, it offers a "Remove Wallet" button.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-c98ed26d.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Automatic wallet lock
    0.0 / 3.9 Expand details
    Description

    Verifies wallet auto-locks on inactivity, device lock, or background.

    • The wallet requires permission to use Face ID but does not auto-lock after inactivity, when the device is locked, or during background execution by default. However, Face ID can be enabled to lock the app.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    family-ios-0.2.1-284373e2.jpgfamily-ios-0.2.1-cacaa57f.jpgfamily-ios-0.2.1-98de70c5.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Robust Authentication
    3.3 / 3.3 Expand details
    Description

    Uses strong authentication, such as resistance to trivial or commonly-used passwords. Including biometrics and rate limiting in mobile.

    • The wallet supports biometric authentication, but not by default. Once enabled, biometrics are required to access the wallet, and if the Face ID is not activated, it defaults to using the iPhone passcode, and it rate-limits attempts after the 5th one.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    family-ios-0.2.1-0ef28bb4.jpgfamily-ios-0.2.1-a9fd9961.jpgfamily-ios-0.2.1-7f02ae27.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Clipboard seed phrase leak prevention
    0.0 / 1.8 Expand details
    Description

    Limits exposure of secrets by restricting or warning on copying seed phrases or taking screenshots.

    • The wallet doesn't show any warning about copying mnemonics to the clipboard or screenshot captures and doesn't limit the time these secrets are present in the clipboard.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-279ac2e1.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Seed phrase access warning
    1.8 / 1.8 Expand details
    Description

    Warns users of the risk before allowing access to seed phrases or private keys.

    • It warns the user about the risks of sharing their mnemonics or private keys

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    family-ios-0.2.1-63a61f17.jpgfamily-ios-0.2.1-ec9825f5.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check

Threat Prevention

10.6 / 20
  • Pass Phishing dApp detection
    5.1 / 5.1 Expand details
    Description

    Prevents or alerts users about interactions with a known malicious URL.

    • Alerts about connections to known phishing DApps like https://arbitrum-token-bridge-cqjggprvn-offchain-labs.vercel.app/

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    family-ios-0.2.1-498b8b86.jpgfamily-ios-0.2.1-31812673.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Malicious address detection
    0.0 / 5.1 Expand details
    Description

    Prevents or alerts users about interactions with a known malicious address.

    • It doesnt show any warning when trying to send funds to the Tornado Cash attacker address

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    family-ios-0.2.1-a08e7657.jpgfamily-ios-0.2.1-a1602991.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Trusted dApp detection
    3.3 / 3.3 Expand details
    Description

    Informs users when interacting with a trusted dApp URL.

    • The wallet displays an alert indicating that the domain is verified.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 2 screenshots
    family-ios-0.2.1-a54b03f7.jpgfamily-ios-0.2.1-84d3b04c.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Fail Unknown address detection
    0.0 / 2.8 Expand details
    Description

    Warns users when interacting with an unknown address.

    • The wallet doesn't warn users when they are interacting with unknown addresses. However, through the app it does warn about new addresses without any previous activity.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 3 screenshots
    family-ios-0.2.1-1e959004.jpgfamily-ios-0.2.1-3bf27e18.jpgfamily-ios-0.2.1-8aba9b58.jpg
    Last updated on Nov 17, 2025
    Report an issue Report an issue with this check
  • Fail Full dApp URL display
    0.0 / 1.5 Expand details
    Description

    Clearly displays the full dApp URL in the connection prompt.

    • The wallet truncates the URL.

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-b2dc3dfe.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass Malicious or spam token filtering
    1.3 / 1.3 Expand details
    Description

    Hides malicious tokens and NFTs by default.

    • The wallet doesn't show spam or scam tokens and NFTs

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-a0d6a4e6.png
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check
  • Pass dApp access disclosure dialog
    1.0 / 1.0 Expand details
    Description

    Informs dApp access to balances, history, and signing requests on connection.

    • Clearly informs users, within the connection dialog, that by connecting they are allowing the DApp to view their wallet balance and activity, as well as to request transaction approvals

      — Verified by Alejo Sequeira at Coinspect
    Evidence · 1 screenshot
    family-ios-0.2.1-1bdf6bf7.jpg
    Last updated on Oct 21, 2025
    Report an issue Report an issue with this check

This ranking is for informational purposes only. It should not be relied on to provide legal, tax, financial, investment, or other types of advice. Coinspect does not guarantee or warrant the accuracy, completeness, timeliness, suitability, or validity of the information provided and will not be responsible for any claim attributable to reliance on errors, omissions, or other inaccuracies of any part of such information.