Velora Wallet Chrome extension security report

Velora is a light-client, non-custodial wallet for the Pactus blockchain. You hold your keys, and they never leave your device. What you can do with Velora: - Create a new wallet, restore from a seed phrase, import a private key, or add a watch-only address. - Manage multiple accounts, and send and receive PAC with automatic fee estimation. - Stake your PAC to validators and track your bonded amount. - Connect to Pactus dApps: Velora exposes a window.pactus provider so sites can request a connection and ask you to sign, always with your explicit approval. - Get optional notifications when a transfer you send succeeds or when PAC arrives. Security: - Your recovery phrase is encrypted with PBKDF2 (120,000 iterations) and AES-256-GCM. Decryption needs your password. - Account keys are re-derived only when needed and are never stored in plaintext. While unlocked, the secret lives only in memory and is cleared on lock or when the browser closes. - Auto-lock is on by default. - No accounts, no analytics, no trackers. Velora talks only to public Pactus RPC nodes and the PactusScan API, for balances, fees, history, and broadcasting the transactions you sign. Velora is also available as an Android app. Learn more at https://velora.pactusscan.com. Velora is a PactusScan project, an open community wallet built for the Pactus ecosystem.