Browser extension crypto wallets
Who holds the keys, whether the code is open, whether development is alive. The score is ours and made only of things that can be checked.
Wallets installed into a browser. 14 entries
| Name | Score | Code | Last update | Code reviews | Keys |
|---|---|---|---|---|---|
| Rabby | 10/10 | Open | August 29, 2026 | 2 | With the user |
| Enkrypt | 8/10 | MIT | August 19, 2026 | — | With the user |
| MetaMask | 8/10 | Open | August 30, 2026 | — | With the user |
| Rainbow | 8/10 | GPL-3.0 | August 30, 2026 | — | With the user |
| SubWallet | 8/10 | Apache-2.0 | August 28, 2026 | — | With the user |
| Talisman | 8/10 | Open | August 28, 2026 | — | With the user |
| Uniswap Wallet | 8/10 | GPL-3.0 | August 17, 2026 | — | With the user |
| Backpack | 5/10 | GPL-3.0 | August 12, 2024 | — | With the user |
| Coinbase Wallet | 5/10 | Open | June 12, 2025 | — | With the user |
| Bitget Wallet | 2/10 | Closed | — | — | With the user |
| Keplr | 2/10 | Closed | — | — | With the user |
| OKX Wallet | 2/10 | Closed | — | — | With the user |
| Phantom | 2/10 | Closed | — | — | With the user |
| Zerion | 2/10 | Closed | — | — | With the user |
How this kind works
The wallet lives in the browser, next to every page you have open. That suits on-chain applications: the page talks to the wallet directly and a transaction is two clicks away. Hence the main risk is not a stolen file but signing the wrong thing. A page can show one thing and send another for signature, and the difference is hard to see in the confirmation window. The second risk is delivery: an extension updates itself, and one poisoned update reaches everyone at once. Meanwhile the keys sit on the machine that also opens mail and downloads files.
What the score is made of
Wallet: open code 3, development in the past three months 3 (within a year 1), code review 2, keys with the user 2.
A low score means «we could check little», not «this one is a bad choice». Closed code offers nothing to look at — that is an absence of proof, not an accusation.
Open code and development from GitHub, code reviews and networks from DefiLlama. The list itself is ours.