Description
There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users’ keys, smart contracts, or funds.
Recommendation
Update the @coinbase/wallet-sdk package to the latest compatible version. Followings are version details:
- Affected version(s): >= 4.0.0-beta.0, < 4.3.0
- Patched version(s): 4.3.0
References
Could your website be exposed too?
SmartScanner can check your website for Unknown vulnerability in Coinbase Wallet SDK and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections - Vulnerability
- Sentry SDK Prototype Pollution gadget in JavaScript SDKs - Vulnerability
- MetaMask SDK indirectly exposed via malicious [email protected] dependency - @metamask/sdk-react - Vulnerability
- MetaMask SDK indirectly exposed via malicious [email protected] dependency - @metamask/sdk - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated January 16, 2026


