Docs

Browser Extension Architecture

Manifest V3 for Chrome, Brave, Edge and other Chromium browsers.

Components

  • Service worker: vault, signing, session permissions
  • Content script: injects EIP-1193 / EIP-6963 provider (window.ethereum)
  • Popup + full-page UI
  • Hardware wallets via WebHID/WebUSB — keys stay on device

Hardening

  • Minimal permissions, no <all_urls> host access beyond injection
  • Strict CSP, no remote code
  • Per-origin permission store; explicit approval for every request

Items marked NATIVE must be implemented as audited native code (Swift, Kotlin, Rust or C++), not in the web app.