Is HEIAN Wallet safe?

Low risk

HEIAN Wallet stores the unlocked private key and mnemonic in plaintext extension storage and exposes the wallet address to any page.

After you unlock the wallet, the extension writes your private key and recovery phrase unencrypted to chrome.storage.local, where they remain until you manually lock it. Separately, any web page can request the wallet address through the eth_accounts call without a connected-site approval. Web pages cannot read the stored key.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk
Who publishes it

No other listings under this identity, 3 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

rpc.moderato.tempo.xyz
Also called by 2 other listings: Pearl Mini, Turnpike
rpc.tempo.xyz
Also called by 3 other listings: Pearl Mini, Turnpike, Hinkal Wallet
explore.tempo.xyz
Also called by 5 other listings, including Pearl Mini, Turnpike

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.