Uniswap

Uniswap

iOS
·
v1.60.2
·
Last updated on Dec 3, 2025

Also on

Android

Chrome

Security Score

55.0

dApp Permissions

27.1 / 35

Confirmation for requests from WalletConnect

9.0 / 9.0
Description
Requires user confirmation for requests from WalletConnect before granting dApp access to specific RPC methods.
- The wallet requires user confirmation before processing the switch chain DApp request.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
User confirmation for requests from embedded browser

7.9 / 7.9
Description
Requires user confirmation before processing privileged RPC requests from embedded browsers.
- The wallet doesn't have an embedded browser.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Wallet unlock before requests

5.5 / 5.5
Description
Requires users to unlock it before processing dApp requests when in a locked state.
- It is asking the user to unlock their wallets in every test
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Mismatching EIP-712 chainId detection

0.0 / 3.5
Description
Alerts users or rejects signing EIP-712 messages with a mismatched chain ID.
- The wallet does not refuse to sign EIP-712 messages when the chain ID doesn't match the currently active chain.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
eth_sign method disabled

3.3 / 3.3
Description
Restricts the use of the deprecated and insecure eth_sign method by default.
- The eth_sign method breaks the dApp connection and fails to execute. However, personal_sign works correctly.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Mismatching SIWE domain detection

0.0 / 1.8
Description
Warns users when the domain in a Sign-In with Ethereum (EIP-4361) message does not match the requesting dApp's origin.
- The wallet doesn't warn users of domain or scheme mismatches when signing an EIP-4361 message.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Connected dApp management

1.5 / 1.5
Description
Allows users to list and revoke connected dApps.
- It shows all connected DApps and also the chance to revoke access to them
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Token approval management

0.0 / 1.5
Description
Allows users to view and revoke token approvals.
- The wallet lacks the functionality to display token approvals.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
User confirmation before switching chains

0.0 / 1.1
Description
Requires user confirmation before switching the active chain.
- It doesn´t require user confirmation before processing the method
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Nov 14, 2025
Report an issue with this check

Intent Verification

5.8 / 25

Transaction simulation

0.0 / 6.7
Description
Previews the expected outcome by simulating the request execution on the blockchain before signing.
- The wallet only shows outgoing transactions. It doesn't display the transaction incomes, such as NFTs received from a pool.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Clear token approval dialog

0.0 / 6.7
Description
Clearly displays all the key details for ERC-20 Approve requests.
- It does not include all the information required, just the contract address of WPOL with a link to PolygonScan and the symbol
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Clear message signing dialog

0.0 / 3.8
Description
Clearly displays all message signature request details without truncating or hiding information.
- It fails to show the verifyingContract field in the EIP712Domain. Tested using the PERSONAL SIGN and SIGN TYPED DATA V4 buttons.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 3 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
EIP-712 message parsing

2.4 / 2.4
Description
Displays human-readable details for EIP-712 signature requests from well-known protocols.
- The wallet parses the EIP-712 ERC-20 Permits but not the Opensea Seaport listings, both were tested with the dApp sign v4 button.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Invalid address checksum detection

2.2 / 2.2
Description
Warns users when they input addresses with invalid EIP-55 checksums.
- When initiating a transaction through the testing DApp, the wallet does not warn about incorrect address checksums and allows you to confirm the transaction, although it doesn’t process it effectively. However, if attempted manually within the wallet, the transaction is not permitted.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 3 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Mandatory message review

0.0 / 2.1
Description
Requires users to review all the details before signing a message.
- Sign buttons are always enabled
  — Verified by Alejo Sequeira at Coinspect
Evidence · 3 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Links to blockchain explorers

1.2 / 1.2
Description
Consistently provides clickable links to block explorers for all key blockchain identifiers.
- The wallet includes clickable links in the transaction history and during the process of sending a transaction.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check

Physical Access

10.5 / 20

Seed phrase access control

5.4 / 5.4
Description
Requires authentication to access seed phrases or private keys.
- After clicking the 'View' button, the wallet requires a password to display the mnemonics or private keys.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Manual wallet lock

0.0 / 3.9
Description
Allows users to lock it manually.
- The wallet lacks a manual lock feature. Instead, it offers a "Remove Wallet" button.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Automatic wallet lock

0.0 / 3.9
Description
Verifies wallet auto-locks on inactivity, device lock, or background.
- The wallet by default does not include any auto-lock feature such as auto-locking on inactivity (1 minute or less by default), when the device gets locked, or when the app is moved to background execution.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Robust Authentication

3.3 / 3.3
Description
Uses strong authentication, such as resistance to trivial or commonly-used passwords. Including biometrics and rate limiting in mobile.
- The wallet supports biometrics or uses the iPhone passcode for authentication.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 4 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Clipboard seed phrase leak prevention

0.0 / 1.8
Description
Limits exposure of secrets by restricting or warning on copying seed phrases or taking screenshots.
- The wallet lets you copy words without warning for over a minute. But if you take a picture of the screen, it tells you it might not be safe.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Seed phrase access warning

1.8 / 1.8
Description
Warns users of the risk before allowing access to seed phrases or private keys.
- It subtly tells you it's risky to share your secret words or private keys with others. This alert appears before the mnemonic viewing process.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check

Threat Prevention

11.6 / 20

Phishing dApp detection

0.0 / 5.1
Description
Prevents or alerts users about interactions with a known malicious URL.
- The wallet does not alert users about connections to known phishing dApps like https://arbitrum-token-bridge-cqjggprvn-offchain-labs.vercel.app/
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Malicious address detection

5.1 / 5.1
Description
Prevents or alerts users about interactions with a known malicious address.
- The wallet blocks a transaction to a known malicious address, such as the Tornado Cash attacker.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Trusted dApp detection

0.0 / 3.3
Description
Informs users when interacting with a trusted dApp URL.
- The wallet may confuse users when connecting to known phishing or verified dApps such as https://arbitrum-token-bridge-cqjggprvn-offchain-labs.vercel.app/ or 1inch, as it displays a verified checkmark in both cases.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 3 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Unknown address detection

2.8 / 2.8
Description
Warns users when interacting with an unknown address.
- The wallet warns users when they are not interacting with a previously known or trusted address if they try to send a manual transaction, but it does not emit any warning if the transaction is done through the dApp.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 3 screenshots

Last updated on Nov 17, 2025
Report an issue with this check
Full dApp URL display

1.5 / 1.5
Description
Clearly displays the full dApp URL in the connection prompt.
- The wallet displays the DApp origin URL in the 'Connect' dialog.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Malicious or spam token filtering

1.3 / 1.3
Description
Hides malicious tokens and NFTs by default.
- The wallet hides spam or scam tokens and NFTs that are sent to it
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
dApp access disclosure dialog

1.0 / 1.0
Description
Informs dApp access to balances, history, and signing requests on connection.
- The wallet clearly tells users it can see your address and token amounts, but won't move your assets without your permission.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check

This ranking is for informational purposes only. It should not be relied on to provide legal, tax, financial, investment, or other types of advice. Coinspect does not guarantee or warrant the accuracy, completeness, timeliness, suitability, or validity of the information provided and will not be responsible for any claim attributable to reliance on errors, omissions, or other inaccuracies of any part of such information.