← Legacy view v2 (rp.*)

rabbyhub/rabby

https://github.com/RabbyHub/Rabby · lang: typescript · LOC: · source: user_submitted

Quality
61.3
Grade C+
Security
75.3
Findings
7
0 critical · 0 high
Status
completed
May 15, 2026 11:08
info: 7
Top rules by occurrence
RuleSeverityCount
SEC015 Insecure Randomness for Security medium 4
SEC020 Secret Printed to Logs high 3
First 7 findings (severity-sorted)
info SEC015 Insecure Randomness for Security
· conf 0.20
[SEC015] Insecure Randomness for Security (and 1 more): Same pattern found in 1 additional files. Review if needed.
info SEC015 Insecure Randomness for Security
src/ui/models/createMnemonics.ts:42 · conf 0.15
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
src/ui/utils/iframeBridge.ts:112 · conf 0.15
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
src/ui/utils/sendTransaction.ts:365 · conf 0.15
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC020 Secret Printed to Logs
src/ui/hooks/useAddressRisk.ts:275 · conf 0.15
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
src/ui/models/perps.ts:1271 · conf 0.15
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
src/ui/views/SendToken/index.tsx:859 · conf 0.15
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/ade185b5-ede5-4048-9a61-741d54f149ab/.