minimalsm
commented
2 years ago Has the wallet's smart contract code or security modules been audited? Not applicable, since MEW is not a smart-contract wallet.
@Foboz this includes any kind of pen testing or audit :-) the idea is that we'd like to link to them as it is good for user trust to see you take security seriously
Wallet name
MEW wallet
Wallet description
Ethereum and DeFi wallet for iOS and Android with Layer 2 support. Buy, hold, and trade Ether and tokens, explore decentralized web, withdraw to bank account, learn about various ways to use Ethereum, and much more.
Wallet logo
Background color for brand logo
05C0A5
URL to the project
https://www.mewwallet.com
When did the wallet go live to users?
13 March 2020
Does the wallet have an active development team?
Yes, a big MyEtherWallet team open source code for the wallet is here: https://github.com/mewwallet
Is the wallet globally accessible?
Yes. MEW does not collect personal data, has no KYC requirements, no geographic limitations.
Is the wallet available in multiple languages?
Yes: English, Russian
What social links are there for the project?
https://twitter.com/myetherwallet https://www.facebook.com/MyEtherWallet https://www.instagram.com/myetherwallet/ https://www.reddit.com/r/MyEtherWallet/ https://t.me/myetherwallet https://www.youtube.com/channel/UCQU5QbObwmaHNEMsuX3uQKA
Does the wallet have a mobile app? If yes, which operating systems are supported (iOS, Android)?
Both: iOS and Android https://apps.apple.com/app/id1464614025 https://play.google.com/store/apps/details?id=com.myetherwallet.mewwallet
Does the wallet have a desktop app? If yes, which operating systems are supported (Windows, Mac, Linux)?
MEW has a web wallet at https://www.myetherwallet.com. The interface can also be downloaded for use on the computer and offline sending from. https://github.com/MyEtherWallet/MyEtherWallet/releases
Does the wallet have a browser extension? If yes, which browsers are supported (Chromium, Firefox, Safari)?
No
Is it a hardware wallet?
No
Is the source code for the wallet fully open-source?
Yes. https://github.com/mewwallet
What license is the wallet software released under?
MIT
Who holds the private keys?
User and only user holds private keys. Keys are saved locally on the device, and multi-layer encrypted with the usage of secure enclave + local Keychain (iOS) or Android Keystore. User can back up their wallet using a secret recovery phrase that is done in accordance with BIP39 standard. So even if MEW team gets abducted by aliens, users will be able to access their funds using any other BIP39-compatible wallet.
Please describe the measures taken to ensure the wallet's security and provide documentation wherever possible
We store keys locally on the device, using multi-layered encryption with the use of secure enclave chip on the device. Keys are only fully decrypted at the time the user needs to execute a transaction or sign a message, and locked immediately after. Our product is open source and these methods are verifiable. It is also battle tested with over a 1,000,000 downloads of our app. In addition to technical efforts and openness of the code, we take every opportunity to educate the user about security and safety, while they are using the app. With such materials as: https://www.mewtopia.com/are-mobile-crypto-wallets-safe/, https://help.myetherwallet.com/en/articles/5377975-how-does-the-mew-wallet-app-protect-my-funds
MEW has ongoing bug-bounty programs at Hacker One: https://hackerone.com/myetherwallet as well as our own: https://www.myetherwallet.com/security-policy
Has the wallet's smart contract code or security modules been audited?
Not applicable, since MEW is not a smart-contract wallet.
Does the wallet have an internal security team?
No. MEW uses HackerOne for penetration testing and works with Phishfort to monitor and take down phishing websites and apps that pretend to be MEW with similar names and visual assets.
Any other security testing that should be noted?
No response
Scam protection?
— We warn user when they are about to send funds to a contract, which can potentially cause them to lose their funds. — We locally check all URLs in the DApp Browser against a database of Phishing/Scam/Spam URLs and warn users if there’s a match. — We allow hiding spam tokens in the User Interface.
Does the wallet support connecting to a hardware wallet?
No
Does the wallet support WalletConnect?
No
Does the wallet support importing Ethereum RPC endpoints?
No
Does the wallet support viewing and interacting with NFTs?
No
Does the wallet support connecting to Ethereum applications?
Yes. Please see guides: https://help.myetherwallet.com/en/articles/5924444-interacting-with-dapps-on-mew-wallet-ios https://help.myetherwallet.com/en/articles/5924469-interacting-with-dapps-on-mew-wallet-android
Does the wallet support staking directly?
Yes, multiple staking options. https://help.myetherwallet.com/en/articles/5449292-eth2-and-staking https://help.myetherwallet.com/en/articles/5608223-understanding-staking https://help.myetherwallet.com/en/articles/5378000-stake-on-eth2-using-mew-wallet-ios https://help.myetherwallet.com/en/articles/5629036-lido-on-mew-wallet-android https://help.myetherwallet.com/en/articles/5971037-lido-on-mew-wallet-ios
Does the wallet support swaps directly?
Yes we aggregate multiple swap platforms and aggregators, to find the best rates for the user. https://help.myetherwallet.com/en/articles/5377984-swap-your-crypto-using-mew-wallet-android https://help.myetherwallet.com/en/articles/5946448-swap-your-crypto-using-mew-wallet-ios
Does the wallet support multi-chain networks?
Yes. https://help.myetherwallet.com/en/articles/5979500-polygon-network-on-mew-wallet-android https://help.myetherwallet.com/en/articles/5974070-change-networks-on-mew-wallet-ios https://help.myetherwallet.com/en/articles/5443041-bsc-network-on-mew-wallet-android
Does the wallet support Ethereum layer 2 networks?
No response
Does the wallet allow the user to customize gas fees?
Yes. https://help.myetherwallet.com/en/articles/5878945-what-is-gas
Does the wallet support sending transactions to ENS addresses?
No
Does the wallet support importing or automatically querying and displaying ERC-20 tokens?
All tokens are displayed automatically, without the need to specifically import them.
Does the wallet support EIP-1559 (type 2) transactions?
Yes
Does the wallet have fiat on-ramps through credit/debit cards, wire transfers, or bank transfers (ACH)?
Yes all of the above. Credit/debit cards, wire transfers, SEPA, ACH. https://help.myetherwallet.com/en/articles/6079459-buy-and-sell-crypto-with-mew-wallet-android https://help.myetherwallet.com/en/articles/6083114-buy-and-sell-crypto-with-mew-wallet-ios
Does the wallet support withdrawals to fiat?
Yes. https://help.myetherwallet.com/en/articles/6079459-buy-and-sell-crypto-with-mew-wallet-android https://help.myetherwallet.com/en/articles/6083114-buy-and-sell-crypto-with-mew-wallet-ios
Is the wallet a multi-signature wallet?
No
Does the wallet support social recovery?
No
Who can the ethereum.org team can contact regarding the wallet in future?
https://twitter.com/myetherwallet Telegram: @VinceM009
Does the wallet have a dedicated support team?
Yes, our turn-around time during working hours US is 1-2 hours. Support is done via chat directly in the app, or on this page: https://help.myetherwallet.com/en/
What educational resources/documentation do you provide to users?
We provide vast amount of support documentation and educational resources: MEW help center: https://help.myetherwallet.com/en/ MEWtopia - a collection of crypto-related articles and manuals: https://www.mewtopia.com/ We also have built-in documentation and how-to guides in the app itself.
Does the wallet have any integrated tools not mentioned above?
Yes, we have — built-in DApp browser, — support for Skale Network token staking — a list of online stores that accept crypto — ability to connect to web version of MyEtherWallet in order to use all features supported by MyEtherWallet.com — Liquid staking with Lido — Bridging feature for bridging Bitcoin in Ethereum Network using Ren protocol. — Markets section with market analysis such as top movers, top gainers/losers, etc. — Ability to create a watch list of tokens. — Support for multiple accounts.