Aladdin Wallet Chrome extension security report

Aladdin Wallet — an EIP-7702 wallet for Ethereum and EVM chains Aladdin Wallet is an open-source browser wallet (Manifest V3) built for the EIP-7702 era. Unlike wallets that refuse account-abstraction RPCs outright, Aladdin exposes wallet_signAuthorization and eth_sendTransaction({authorizationList}) to any dapp — with no hard-coded delegate whitelist — while surfacing bold, per-request risk warnings so you stay in control. KEY FEATURES • EIP-7702 native — sign authorizations and send delegated transactions that most wallets don't support yet • Multi-chain — Ethereum Mainnet and Sepolia built in; add any EVM network at runtime • HD multi-account — standard BIP-44 derivation; rename, switch, and manage accounts from a full-screen picker • Clear signing — EIP-712 messages (Permit / Permit2 / Seaport and more) are parsed into named fields with human-readable amounts, not raw hex • Token dashboard — native + ERC-20 balances with live USD values, batched through Multicall3 for instant refresh • Send & Receive — token picker with live fiat preview, EIP-1559 gas tiers, and a scannable QR code • Custom connect screen — see the site, the account, and exactly which permissions a dapp requests before you approve • Auto-lock — configurable timer that survives service-worker restarts • EIP-6963 discovery — announced cleanly to modern dapps SECURITY Your seed phrase and private keys are encrypted (AES-GCM / PBKDF2) and never leave your device. Aladdin surfaces risk — dangerous 7702 delegations, permit approvals, and value mismatches all get bold warnings and a fresh confirmation every time. You read the prompt; you decide. OPEN SOURCE Aladdin Wallet is a transparent reference implementation. Source, issues, and security reporting are public. Not affiliated with any exchange or asset manager. This is wallet software, not financial or investment advice. You alone control your keys and funds.