Skip to content

[SECURITY] Add unlock attempt rate limiting in service worker #678

@wheval

Description

@wheval

Summary

Throttle failed password unlock attempts to reduce brute force risk.

Background

Medium-effort, independently implementable task. Not part of Stellar Wave program tracking.

Scope

  • apps/extension-wallet/src/background/service-worker.ts

Files to create / modify

Track failures in session storage with exponential backoff.

Example implementation

if (failures >= 5) return { ok: false, retryAfterMs: backoffMs };

Acceptance criteria

  • Lockout after N failures
  • Success resets counter
  • User-visible retry message
  • Tests with fake timers

Difficulty

Medium

Labels

enhancement, medium, security, extension

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions