Wallet Connection

Overview

A connection can expose account addresses, network information, signing methods, events, and transaction-request capabilities. It may be created through a browser provider, mobile deep link, QR code, hardware interface, API, or session protocol such as WalletConnect.

Connection does not necessarily grant spending permission, but it can reveal identity and enable later requests. Malicious applications may imitate trusted services or request broader chains, accounts, methods, and events than needed. Persistent sessions can outlive the user’s original purpose.

Users should verify the application origin and requested scope before connecting. Wallets should display accounts, networks, methods, expiry, and session identity clearly. Permissions need minimum scope and revocation controls. Organizations should monitor active connections and remove stale sessions. Each subsequent request still requires canonical transaction or message review rather than relying on the connection’s prior approval.

Material risks for Wallet Connection include credential compromise, malicious destinations, unsupported assets, wrong-network transfers, stale balances, compromised software, provider outage, privacy leakage, and inaccessible recovery material. For Wallet Connection, controls should reflect value, automation, reversibility, and whether the organization or a third party controls signing.

Wallet Connection should be distinguished from the asset balance and from the application that displays it. For example, a customer-facing success message does not prove that the intended transaction executed on the correct network; operations should verify execution and reconcile the result before irreversible fulfillment.

Production ownership for Wallet Connection should identify the user or legal entity, supported assets and networks, address model, custody boundary, signing authority, recovery method, and systems permitted to request or observe transactions. For Wallet Connection, these fields determine who can act and which evidence is authoritative.