Trail of Bits

WalletConnect v2.0

Type

Security review

Client

WalletConnect

Date

2023-03

Domain

Blockchain

Effort

4 wks

Section

Wallet Reviews

Trail of Bits's security review of WalletConnect (Mar 2023) identified 4 issues: 1 medium, 2 informational, and 1 undetermined.

Findings · 4

  1. 1 Use of outdated dependencies Informational
  2. 2 No protocol-level replay protections in WalletConnect Undetermined
  3. 3 Key derivation code could produce keys composed of all zeroes Informational
  4. 4 Insecure storage of session data in local storage Medium

Findings extracted from the published report PDF. See the full report below for details and remediation.

Related