Is ROSE Wallet safe?

ROSE Wallet stores a V0 migration backup of private keys in extension localStorage protected by a KDF 31x weaker than the current standard.

During a one-time profile migration, ROSE Wallet writes an encrypted backup of all private keys and mnemonics to extension localStorage under the key 'oasis_wallet_backup_v0'. This backup is derived with only 10,000 PBKDF2-SHA256 iterations while the current storage path uses 310,000 iterations, making the backup significantly more vulnerable to offline brute-force if the browser profile is ever accessed by an attacker.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.