Rainbow: software wallets rating breakdown
GPL-3.0 and genuinely open — a better licence than MetaMask's, which almost nobody realises.
GPL-3.0 and genuinely open — a better licence than MetaMask's, which almost nobody realises.
How the score is built
Each criterion is scored 0–10 and weighted. The median column is the middle score across every entry in this ranking, so a row reads as a position rather than a number.
| Criterion | What we measured | Weight | Score | Category median | Rank | Weighted gap |
|---|---|---|---|---|---|---|
| Security model and open code | — | 30% | 8 | 8 | 7 of 17 | 0.00 |
| Privacy | — | 20% | 5 | 5 | 9 of 17 | 0.00 |
| Transaction transparency | — | 15% | 4 | 5 | 12 of 17 | -0.15 |
| Swap cost | — | 15% | 2 | 5 | 12 of 17 | -0.45 |
| Recovery and portability | — | 10% | 9 | 9 | 1 of 17 | 0.00 |
| Networks | — | 10% | 7 | 7 | 9 of 17 | 0.00 |
Measured 14 July 2026 · weights and method · decided by swap cost, worth -0.45 points against the median
Security model and open code: 8/10
Non-custodial, MPC or custodial — and where the key actually sits on your device. Then the licence, as it stands today rather than as folklore remembers it: several well-known wallets have quietly moved to source-available terms that are not open source. Audits count only when the firm is named and the report is public.
Scored 8 of 10 against a category median of 8, which places it 7th of 17 among software wallets on this criterion. At a 30% weight that is exactly level with the median of the weighted total. The best score in the category is 10, the worst 2.
Privacy: 5/10
The most underrated question in this category: which RPC endpoint does the wallet talk to out of the box, and who owns it? If the default RPC is operated by the wallet’s own vendor, that vendor sees the IP address behind every balance check and every transaction, and can link it to your addresses. We read the default configuration and the privacy policy, and we quote the clause. Can you point it at your own node, and how hard is it?
Scored 5 of 10 against a category median of 5, which places it 9th of 17 among software wallets on this criterion. At a 20% weight that is exactly level with the median of the weighted total. The best score in the category is 10, the worst 2.
Transaction transparency: 4/10
Does the wallet simulate the transaction and show you the actual outcome before you sign it, and does it warn you about known drainer contracts? The same question as clear signing on a hardware device, asked of software.
Scored 4 of 10 against a category median of 5, which places it 12th of 17 among software wallets on this criterion. At a 15% weight that is 0.15 points below the median contribution of the weighted total. The best score in the category is 10, the worst 3.
Swap cost: 2/10
The built-in swap is how most free wallets are paid. We record the published service fee — and when a wallet does not publish one at all while still taking a cut of the spread, that silence is the finding and it is scored as one.
Scored 2 of 10 against a category median of 5, which places it 12th of 17 among software wallets on this criterion. At a 15% weight that is 0.45 points below the median contribution of the weighted total. The best score in the category is 10, the worst 1.
Recovery and portability: 9/10
Standard BIP39, and whether the seed restores in another wallet. A wallet you cannot leave is a custodian with extra steps.
Scored 9 of 10 against a category median of 9, which places it 1st of 17 among software wallets on this criterion. At a 10% weight that is exactly level with the median of the weighted total. The best score in the category is 9, the worst 3.
Networks: 7/10
Which chains genuinely work, from the wallet’s own documentation.
Scored 7 of 10 against a category median of 7, which places it 9th of 17 among software wallets on this criterion. At a 10% weight that is exactly level with the median of the weighted total. The best score in the category is 9, the worst 2.
Other measurements
- third-party audit
- not published SOURCED
Its nearest neighbours in this ranking
Questions about this score
Is Rainbow open source?
+
Yes, under GPL-3.0 — a copyleft licence that permits inspection, modification and redistribution provided changes are published. MetaMask's licence is more restrictive, which is one of the quieter reasons this rating places several less famous wallets above it.