Is Ronin Wallet safe?

Ronin Wallet injects an Ethereum provider into all web pages and fetches an Amplitude script from cdn.amplitude.com with no integrity check.

Ronin Wallet is a browser-based cryptocurrency wallet for the Ronin blockchain, developed by Axie Infinity. It injects a content script into all HTTP and HTTPS pages to expose an Ethereum-compatible provider interface (window.ronin / window.ethereum) that websites can use to request signatures and transactions. The extension's popup page includes the Amplitude analytics SDK, which, when developer-initiated visual tagging is triggered, fetches and executes a script from cdn.amplitude.com without a subresource integrity check.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.