dApp Permissions
- User confirmation before processing requests8.7 / 8.7Description
Requires user confirmation before processing requests from dApps for specific RPC methods.
-
The wallet requires user confirmation for every request.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- User consent for dApp access7.7 / 7.7Description
Requires user approval before granting dApp access to specific RPC methods.
-
The wallet requires user connection for every request.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Wallet unlock before requests5.6 / 5.6Description
Requires users to unlock it before processing dApp requests when in a locked state.
-
The wallet requires the user to unlock the wallet for every request.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Mismatching EIP-712 chainId detection3.5 / 3.5Description
Alerts users or rejects signing EIP-712 messages with a mismatched chain ID.
-
The wallet refuses to sign an EIP-712 object with different chain IDs.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- eth_sign method disabled3.3 / 3.3Description
Restricts the use of the deprecated and insecure eth_sign method by default.
-
The eth_sign method breaks the dApp connection and fails to execute. However, personal_sign works correctly.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Mismatching SIWE domain detection0.0 / 1.8Description
Warns users when the domain in a Sign-In with Ethereum (EIP-4361) message does not match the requesting dApp's origin.
-
The wallet doesn't warn users of domain or scheme mismatches when signing an EIP-4361 message.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Connected dApp management1.5 / 1.5Description
Allows users to list and revoke connected dApps.
-
It shows all connected DApps and also the chance to revoke access to them
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Token approval management0.0 / 1.5Description
Allows users to view and revoke token approvals.
-
The wallet doesn't allow users to revoke token approvals through its own built-in revocation system or links to external DApps.
— Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots
Last updated on Oct 21, 2025Report an issue with this check -
- User confirmation before switching chains0.0 / 1.1Description
Requires user confirmation before switching the active chain.
-
It doesn´t require user confirmation before processing the method
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Nov 14, 2025Report an issue with this check -
Intent Verification
- Transaction simulation0.0 / 6.7Description
Previews the expected outcome by simulating the request execution on the blockchain before signing.
-
The wallet only shows outgoing transactions. It doesn't display the transaction incomes, such as NFTs received from a pool.
— Verified by Alejo Sequeira at Coinspect
Evidence · 3 screenshots

Last updated on Oct 21, 2025Report an issue with this check -
- Clear token approval dialog0.0 / 6.7Description
Clearly displays all the key details for ERC-20 Approve requests.
-
It does not include all the information required, just the contract address of WPOL with a link to PolygonScan and the symbol
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Clear message signing dialog3.8 / 3.8Description
Clearly displays all message signature request details without truncating or hiding information.
-
The verifying contract is displayed in the EIP-712 object, and the wallet does not truncate large inputs in a personal sign request.
— Verified by Alejo Sequeira at Coinspect
Evidence · 3 screenshots

Last updated on Oct 21, 2025Report an issue with this check -
- EIP-712 message parsing0.0 / 2.4Description
Displays human-readable details for EIP-712 signature requests from well-known protocols.
-
The wallet doesn't parse EIP-712 objects from well-known contracts and protocols.
— Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots
Last updated on Oct 21, 2025Report an issue with this check -
- Invalid address checksum detection2.2 / 2.2Description
Warns users when they input addresses with invalid EIP-55 checksums.
-
When initiating a transaction through the testing DApp, the wallet does not warn about incorrect address checksums and allows you to confirm the transaction, although it doesn’t process it effectively. However, if attempted manually within the wallet, the transaction is not permitted.
— Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots
Last updated on Oct 21, 2025Report an issue with this check -
- Mandatory message review0.0 / 2.1Description
Requires users to review all the details before signing a message.
-
When signing a personal message with a large input, the button remains available at all times.
— Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots
Last updated on Oct 21, 2025Report an issue with this check -
- Links to blockchain explorers1.2 / 1.2Description
Consistently provides clickable links to block explorers for all key blockchain identifiers.
-
The wallet includes clickable links in the transaction history and during the process of sending a transaction.
— Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots
Last updated on Oct 21, 2025Report an issue with this check -
Physical Access
- Seed phrase access control5.4 / 5.4Description
Requires authentication to access seed phrases or private keys.
-
The wallet supports seed phrase backup functionality and it enforces authentication to display the mnemonics or private keys.
— Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots
Last updated on Oct 21, 2025Report an issue with this check -
- Manual wallet lock3.9 / 3.9Description
Allows users to lock it manually.
-
The wallet includes a manual lock button in the settings menu.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Automatic wallet lock0.0 / 3.4Description
Verifies wallet auto-locks on inactivity.
-
The wallet offers auto-lock options, but by default, it is set to activate after 30 minutes of inactivity.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Robust Authentication3.3 / 3.3Description
Uses strong authentication, such as resistance to trivial or commonly-used passwords. Including biometrics and rate limiting in mobile.
-
The wallet requires users to create an 8-digit password and prevents the use of easily guessable passwords like "12345678."
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Clipboard seed phrase leak prevention0.0 / 1.8Description
Limits exposure of secrets by restricting or warning on copying seed phrases or taking screenshots.
-
The wallet does not explicitly warn the user about the risks of copying mnemonics or private key to the clipboard.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Seed phrase access warning1.8 / 1.8Description
Warns users of the risk before allowing access to seed phrases or private keys.
-
The wallet displays a warning in the mnemonics interface, informing the user about the risks of sharing their mnemonics.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
Threat Prevention
- Phishing dApp detection0.0 / 5.1Description
Prevents or alerts users about interactions with a known malicious URL.
-
The wallet does not alert users about connections to known phishing dApps like https://arbitrum-token-bridge-cqjggprvn-offchain-labs.vercel.app/
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Malicious address detection0.0 / 5.1Description
Prevents or alerts users about interactions with a known malicious address.
-
The wallet does not alert users about interactions with known phishing or scam addresses.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Trusted dApp detection0.0 / 3.3Description
Informs users when interacting with a trusted dApp URL.
-
The wallet does not inform users when they are interacting with well-known, verified URLs (dApps) such as 1inch or OpenSea, but it does display a verification checkmark for Uniswap.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Unknown address detection2.8 / 2.8Description
Warns users when interacting with an unknown address.
-
The wallet warns users when they interact with an unknown or untrusted address.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Nov 17, 2025Report an issue with this check -
- Full dApp URL display1.5 / 1.5Description
Clearly displays the full dApp URL in the connection prompt.
-
The wallet displays the DApp origin URL in the 'Connect' dialog.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- Malicious or spam token filtering1.3 / 1.3Description
Hides malicious tokens and NFTs by default.
-
The wallet successfully filters out scam and spam NFTs from the list.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
- dApp access disclosure dialog1.0 / 1.0Description
Informs dApp access to balances, history, and signing requests on connection.
-
The wallet clearly tells users it can see your address and token amounts, but won't move your assets without your permission.
— Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot
Last updated on Oct 21, 2025Report an issue with this check -
This ranking is for informational purposes only. It should not be relied on to provide legal, tax, financial, investment, or other types of advice. Coinspect does not guarantee or warrant the accuracy, completeness, timeliness, suitability, or validity of the information provided and will not be responsible for any claim attributable to reliance on errors, omissions, or other inaccuracies of any part of such information.