Chrome Web Store
181Versions
1Code reviewed

No malware found

In code review (v2.27.4)

Our reviewer read version 2.27.4 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

134 indicators in this extension

134 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Solflare Wallet, used by 700,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can observe network requests. It comes from a trusted publisher and was last updated in October 2026.

Analyst notes

The extension is a well-known Solana wallet (Solflare) with 700k+ users, a trusted publisher (Google-verified), and a long history (1741 days). Its permissions (storage, tabs, webRequest, etc.) are justified for wallet functionality (transaction monitoring, dApp connection, key storage). The code review of shows standard wallet communication bridging between the page, content script, and background, with no data exfiltration or unauthorized network requests. Bundled static assets are standard open-source libraries (React, date-fns, etc.) and locale files. No remote code loading or injection beyond the expected inpage script. The ML model's score (0.00) is already low, and the third-party risk score's critical flags are solely permission-based, not evidence of malice. The extension's behavior aligns with its stated purpose and privacy policy.

Solflare Wallet

Solflare Wallet Chrome extension security report

ID: bhhhlbepdkbapadjdnnojkbgioiodbic

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.40.1
Size
44.60 MB
Rating
4.9/5
Reviews
3,100
Users
700,000
Type
Extension
Updated
Oct 9, 2026
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
solflare.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
700,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
<all_urls>
Risk Factor
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

134 indicators in this extension

134 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

The most powerful wallet on Solana, trusted by 4M+ users managing $20B+ in assets.

Read the publisher’s full description

🥇 Solflare - the Most Powerful Wallet on Solana, managing $20B+ in crypto assets and trusted by 4M+ active users. 💳 Your all-in-one wallet extension to buy, store, stake, swap crypto, and manage tokens and NFTs on Solana. 🔐 Securely explore, trade, and manage over 3 million tokens and meme coins. Easily connect to your favorite Web3 dApps and engage with NFT communities. ⭐️ Perfect for beginners and pros looking to build wealth through DeFi, staking, and trading crypto on Solana. Here’s why Solflare is your go-to wallet for Solana in Web3: • Unbreakable security With Solflare’s cutting-edge defensive measures, you can experience the best of Solana with Solflare, knowing your crypto funds are always secure. With zero security issues to date, our unbreakable security system protects you as you freely explore the Solana Web3 and DeFi ecosystem. • Buy crypto with the best rates Buy coins directly through your wallet via debit/credit cards, bank transfers, or Apple and Google Pay, with another 130+ payment methods. You can purchase Solana directly in the extension and quickly convert traditional currencies like USD or EUR to crypto or tokens with just a few clicks. • Move coins and NFTs easier than money Easily send funds to any Solana address or scan a QR code for instant token transfers. Choose from recent contacts or your address book for convenience, or share your QR code/wallet address to receive funds quickly. • Raise the stakes Staking earns you passive income on your SOL while increasing the overall stability of Solana. While staked, your SOL remains secure, and you have the option to instantly unstake for quick access to your tokens whenever needed. • Trade victorious Swap tokens for success. Effortlessly identify the most promising meme coins from over 3 million Solana coins. As soon as new tokens are created, swap them at the best rates, lightning fast. • Spot trends. Dominate the market. Explore trends and discover new investment opportunities in the Web3 and DeFi world. Stay ahead with real-time data and trends. Tokens, swaps, and more – stay informed and ready to profit. • Every asset under your command Your coins, your NFTs, your stakes, your activity. Easily manage and personalize your entire crypto portfolio from a single page. • One click to your favorite Solana Web3 dApps Easily access and interact with your favorite Solana Web3 dApps with the wallet, including Jupiter, Raydium, Pump.fun, DEX Screener, and Magic Eden. • Around-the-clock human support Everyone gets stuck sometimes. If you need assistance, our support team is available around the clock. Whether you have questions about crypto, staking, NFTs, tokens, or swaps, you can easily connect with us through live chat 24/7. • Fortified security with hardware wallet Securely connect your hardware wallet, like Ledger or Keystone, for top-level security. Manage your tokens, NFTs, and crypto assets while keeping your holdings offline and extra safe. A hardware wallet adds an essential layer of protection for serious crypto users and DeFi enthusiasts. • Rule your NFT collections Solflare makes it easy to store, view, manage, and even instantly sell your Solana NFTs. Use your collectibles as a profile picture, send them to others, and manage them all at once in your wallet. Install Solflare today and claim your place in the Stronghold of the Free!

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
134

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

134 indicators in this extension

134 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.40.1
Latest
44.60 MBNot scanned—
9f0fee547d5d114df7e0952566078eff4840452242a70c1f26e3da8eadfd9405
2.40.0
44.60 MBNot scanned—
9f0fee547d5d114df7e0952566078eff4840452242a70c1f26e3da8eadfd9405
2.39.1
44.57 MBNot scanned—
9f0fee547d5d114df7e0952566078eff4840452242a70c1f26e3da8eadfd9405
2.39.0
44.57 MBNot scanned—
9f0fee547d5d114df7e0952566078eff4840452242a70c1f26e3da8eadfd9405
2.38.0
44.45 MBNot scanned—
9f0fee547d5d114df7e0952566078eff4840452242a70c1f26e3da8eadfd9405
2.37.2
43.94 MBNot scanned—
5993b7b96661bd414bf3e171dfcf5a407ab7167e98f4b90764828380ed439b91
2.37.1
43.82 MBNot scanned—
5993b7b96661bd414bf3e171dfcf5a407ab7167e98f4b90764828380ed439b91
2.36.0
43.74 MBNot scanned—
5993b7b96661bd414bf3e171dfcf5a407ab7167e98f4b90764828380ed439b91
2.35.2
43.55 MBNot scanned—
5993b7b96661bd414bf3e171dfcf5a407ab7167e98f4b90764828380ed439b91
2.35.1
43.57 MBNot scanned—
5993b7b96661bd414bf3e171dfcf5a407ab7167e98f4b90764828380ed439b91
Showing 1 to 10 of 190 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.