Satori GO Chrome extension security report

Satori GO is a non-custodial wallet for EVRmore (EVR) and EVRmore assets, built for the Satori Network. Your keys stay on your machine — encrypted, and never sent anywhere. WHAT YOU CAN DO • Hold, receive and send EVR and any EVRmore asset, including SATORIEVR. • Run several wallets at once. Create one from a recovery phrase, or import an existing Satori private key. • See every asset you own — the wallet detects them automatically, and you can add any asset by name. • Stake SATORIEVR by delegating to a Satori pool. No funds move: joining a pool is an off-chain signature, not a transaction. • Connect to websites. Sites can request your address, ask you to sign a login message, or propose a transaction — and every one of those opens a window where you approve or reject it yourself. • Get a desktop notification when funds arrive (optional). • Keep an address book, review your activity, and export it. HOW YOUR KEYS ARE PROTECTED • Your recovery phrase and private keys are stored only as AES-256-GCM ciphertext, with the key derived from your password using scrypt. The password itself is never stored. • Keys are decrypted only in the wallet window, only while unlocked, and are wiped from memory when it locks. • No transaction is ever broadcast without you confirming it, with the real network fee shown first. • A website's approval is bound to one specific wallet — switching wallets does not quietly hand a site your other accounts. • The wallet verifies the value of every coin it is about to spend directly against the blockchain, so a hostile or broken server cannot trick it into burning your balance as a miner fee. OPEN SOURCE The full source code is public: https://github.com/SatoriNetwork/SatoriGO IMPORTANT — PLEASE READ This wallet handles real money on the Evrmore mainnet. It is open-source and has had an internal security review, but it has NOT had a formal external audit. Use only what you can afford to lose, always make a small test transaction first, and back up your recovery phrase — if you lose it, nobody, including us, can recover your funds.