Add built-in Ethereum remote client / wallet / Dapp browser

[bbondy]

We're in the process of adding a first class Ethereum remote client / wallet feature to Brave by integrating a fork of Metamask that we'll modify, enhance and maintain. Sometimes native APIs that only Brave supports will be used, in those cases it probably doesn't make sense to upstream those parts.

We'll be upstreaming as much as we can to MetaMask. We have been, and will continue to collaborate with the MetaMask team as this work progresses.

Some bigger main differences will be:

• Initial UI will not include a browser action button, but be a menu item in the hamburger menu that opens up the full wallet view.
• Dapp detection UI and popup UI will be used. The user will need to give permission to a page to see any available API (e.g. EIP 1102 window.ethereum and web3).
• It will use Brave branding.
• The UI will be modified in some ways.
• The seed key will be derived from the Brave key (currently only used for Sync) via a 1 way transformation. Which means you only need to backup 1 set of BIP-39 style codewords and then you can use either or both of client side encrypted sync and the wallet. Sync uses curve25519 whereas Ethereum uses secp256k1.

Rollout:

• Desktop will be rolled out first.
• Android is in the process of being re-written on top of Brave Core and it will support this feature after we add extension support here [Android] Add extension support to Brave Core Android #4493. We are planning to also tie into Samsung and HTC private enclave and / or wallet.

Future Brave rewards features will integrate and use this wallet support for P2P transactions.

---

Some stats from MetaMask which are relevant :

Here's some stats for the month of April for MetaMask:

264,000 MAU
30% of active users confirm on chain transactions
1.5152M transactions 

Of 100% of network type activity:
- 63% of activity happens on mainnet
- 14.5% Ropsten
- 8% Rinkeby
- 6% Ganache
- 2% Kovan
- 6.5% Other

Of 100% of initiation type for transactions:
- 76% via popup from apps
- 24% via the user
Privacy Preserving Product Analytics (P3A)

Of 100% transaction types:
- 18% token transfers
- 12% ETH sends
- 3% approve
- 2.5% transfer from
- 0.2% contract deployment
- 64% Other contract interaction

Top mainnet sites by volume:
- 0x universe
- Cryptokitties
- Dice 2 Win
- Axie Infinity
- Fork Delta

Diversity of transactions to apps:
- Over 25 apps have over 5k transactions

Source:
https://medium.com/metamask/metamask-metrics-fbec0e2ceaa7

---

Here are the issues closed as part of this feature:
https://github.com/brave/brave-browser/issues?q=label%3Afeature%2Fcrypto-wallets+is%3Aclosed

Test Plan

I'm going to need help with this but:

• New profile and navigating to brave://wallet or chrome://wallet should take a bit longer the first time and actually install the component and work seamlessly.

• New profile and instead going to the hamburger menu for crypto wallet should do the same and install and open the wallet.

• Chromium Process Task Manager in the hamburger menu tools should not show that it is running before installing it via one of the 2 above methods.

• Test basic wallet functionality for ETH send/receive

• Test basic wallet functionality for ERC20 send/receive

• Test basic Dapp functionality, buy a cryptokitty and Sire it. Use a Dex.

• Try changing from mainnet to another network, make sure it works.

• Check closed issues that are labeled feature/crypto-wallets inside of 0.70.x milestone for more ideas.

[bbondy]

This is on Nightly, there will be follow up work but I'm closing!

[bbondy]

Added test plan above.

[kjozwiak]

@bbondy @tomlowenthal would running through https://github.com/brave/ethereum-remote-client/wiki/Testing be sufficient enough for QA verification? It's basically similar to what's outlined under #4494 (comment) but more detailed.

[bbondy]

sgtm

[kjozwiak]

Verification PASSED on macOS 10.14.6 x64 using the following build:

Brave	0.69.131 Chromium: 77.0.3865.90 (Official Build) (64-bit)
Revision	58c425ba843df2918d9d4b409331972646c393dd-refs/branch-heads/3865@{#830}
OS	macOS Version 10.14.6 (Build 18G95)

Account Creation

• There should be no prompt to opt-in to MetaMetrics telemetry during the onboarding process.
• After password creation, a 24 word seed phrase should be generated for you, and it should process during the verification step.
• The backup file should contain the intact 24 word seed phrase.

Import & Recovery

• Ensure that text fields for seed phrases only accept 24 word phrases
• Upon successful recovery, the exact wallet should be loaded as the main account. Balances for each network should be retained.

Settings page

• There should be no About tab present --> Created removing "about" tab from "Settings" page #6271
• Under the advanced tab, there should be no prompt for Mobile Sync --> Created removing "Mobile Sync" from "Settings -> Advanced" #6272
• The Info & Help tab should not be present in the main dropdown menu --> Created remove "Info & Help" from the main settings menu #6273
• There should be no link to the MetaMask TOS
• There should be no option to opt-in to MetaMetrics telemetry from the Security tab

Branding

• There are no appearances of the word MetaMask.
• Links to MetaMask resources, such as websites and emails, should point to Brave resources.
• In downloadable resources, such as the recovery key, the name MetaMask should not be in the filename. Created --> downloaded seed phrase backup named "MetaMask Secret Backup Phrase" #6275
• The MetaFox logo should not be present anywhere. (Check the welcome page, header, and login page)
• Muli and Poppins fonts should be in use throughout the extension

BAT

• The BAT Token should be added by default to each eth network.

Dapps

Use a dapp such as https://www.cryptokitties.co/ for testing

• The Dapp can successfully connect to your crypto wallets account, signed via a pop-up notification
• Transactions relating to the dapp's functionality can be signed and completed via a pop-up notification
• All dapp transactions where assets are sent/received show up in the account activity view within the extension

Transactions

• A QR code is visible for the generated address on Account Details
• Eth/ERC-20 tokens can be received at the addresses generated for your account
• Eth/ERC-20 tokens can be sent to other addresses from your account
• For send transactions, Gas is calculated appropriately and can be adjusted for different speeds

Accounts/Hardware

• Multiple accounts be created via the dropdown menu, whether new or imported
• An account can be created by connecting a Trezor hardware device
• An account can be created by connecting a Ledger hardware device
  ERC-20 assets can be added to the token list

Failed Transactions

Successful Transactions

Transaction appearing under Uphold

Connected to Nano Ledger

Connected to Trezor

[srirambv]

Most verification passed on

Brave	0.69.131 Chromium: 77.0.3865.90 (Official Build) (64-bit)
Revision	58c425ba843df2918d9d4b409331972646c393dd-refs/branch-heads/3865@{#830}
OS	Linux

Account Creation

• There should be no prompt to opt-in to MetaMetrics telemetry during the onboarding process.
• After password creation, a 24 word seed phrase should be generated for you, and it should process during the verification step.
• The backup file should contain the intact 24 word seed phrase.

Import & Recovery

• Ensure that text fields for seed phrases only accept 24 word phrases
• Upon successful recovery, the exact wallet should be loaded as the main account. Balances for each network should be retained.

Settings page

• There should be no About tab present --> Blocked on removing "about" tab from "Settings" page #6271
• Under the advanced tab, there should be no prompt for Mobile Sync --> Blocked on removing "Mobile Sync" from "Settings -> Advanced" #6272
• The Info & Help tab should not be present in the main dropdown menu --> Blocked remove "Info & Help" from the main settings menu #6273
• There should be no link to the MetaMask TOS
• There should be no option to opt-in to MetaMetrics telemetry from the Security tab

Branding

• There are no appearances of the word MetaMask. Blocked on Import wallet learn more links to MM help page #6103, Order a Trezor link contains Metamask affiliate link #6102, Metamask should be removed from successful message on completing the challenge #6100, Metamask icons in connect hardware screen #6038
• Links to MetaMask resources, such as websites and emails, should point to Brave resources. Blocked on Get help link on connect hardware points to Metamask support page #6039, About wallet page has links to MM  #6101, Order a Trezor link contains Metamask affiliate link #6102, Import wallet learn more links to MM help page #6103, JSON file import help links to MM help page #6104
• In downloadable resources, such as the recovery key, the name MetaMask should not be in the filename. Blocked on downloaded seed phrase backup named "MetaMask Secret Backup Phrase" #6275, Save state logs uses MetaMask in download file name #6281
• The MetaFox logo should not be present anywhere. (Check the welcome page, header, and login page). This is blocked on Metamask icons in connect hardware screen #6038
• Muli and Poppins fonts should be in use throughout the extension

BAT

• The BAT Token should be added by default to each eth network.

Dapps

Use a dapp such as https://www.cryptokitties.co/ for testing

• The Dapp can successfully connect to your crypto wallets account, signed via a pop-up notification
• Transactions relating to the dapp's functionality can be signed and completed via a pop-up notification
• All dapp transactions where assets are sent/received show up in the account activity view within the extension

Transactions

• A QR code is visible for the generated address on Account Details
• Eth/ERC-20 tokens can be received at the addresses generated for your account
• Eth/ERC-20 tokens can be sent to other addresses from your account
• For send transactions, Gas is calculated appropriately and can be adjusted for different speeds

Accounts/Hardware

• Multiple accounts be created via the dropdown menu, whether new or imported
• An account can be created by connecting a Trezor hardware device
• An account can be created by connecting a Ledger hardware device
• ERC-20 assets can be added to the token list

Wallet creation success

Connect to Daap site

Signin to Daap site

Hardware Wallet Detect

Connect new hardware and unlock wallet

Trezor Wallet connected

Ledger wallet connected

Confirmed transaction

Transaction notification

Insufficient funds message

[srirambv]

Most verification passed on

Brave	0.69.131 Chromium: 77.0.3865.90 (Official Build) (64-bit)
Revision	58c425ba843df2918d9d4b409331972646c393dd-refs/branch-heads/3865@{#830}
OS	Windows 10 OS Version 1803 (Build 17134.523)

Account Creation

• There should be no prompt to opt-in to MetaMetrics telemetry during the onboarding process.
• After password creation, a 24 word seed phrase should be generated for you, and it should process during the verification step.
• The backup file should contain the intact 24 word seed phrase.

Import & Recovery

• Ensure that text fields for seed phrases only accept 24 word phrases
• Upon successful recovery, the exact wallet should be loaded as the main account. Balances for each network should be retained.

Settings page

• There should be no About tab present --> Blocked on removing "about" tab from "Settings" page #6271
• Under the advanced tab, there should be no prompt for Mobile Sync --> Blocked on removing "Mobile Sync" from "Settings -> Advanced" #6272
• The Info & Help tab should not be present in the main dropdown menu --> Blocked remove "Info & Help" from the main settings menu #6273
• There should be no link to the MetaMask TOS
• There should be no option to opt-in to MetaMetrics telemetry from the Security tab

Branding

• There are no appearances of the word MetaMask. Blocked on Import wallet learn more links to MM help page #6103, Order a Trezor link contains Metamask affiliate link #6102, Metamask should be removed from successful message on completing the challenge #6100, Metamask icons in connect hardware screen #6038
• Links to MetaMask resources, such as websites and emails, should point to Brave resources. Blocked on Get help link on connect hardware points to Metamask support page #6039, About wallet page has links to MM  #6101, Order a Trezor link contains Metamask affiliate link #6102, Import wallet learn more links to MM help page #6103, JSON file import help links to MM help page #6104
• In downloadable resources, such as the recovery key, the name MetaMask should not be in the filename. Blocked on downloaded seed phrase backup named "MetaMask Secret Backup Phrase" #6275, Save state logs uses MetaMask in download file name #6281
• The MetaFox logo should not be present anywhere. (Check the welcome page, header, and login page). This is blocked on Metamask icons in connect hardware screen #6038
• Muli and Poppins fonts should be in use throughout the extension

BAT

• The BAT Token should be added by default to each eth network.

Dapps

Use a dapp such as https://www.cryptokitties.co/ for testing

• The Dapp can successfully connect to your crypto wallets account, signed via a pop-up notification
• Transactions relating to the dapp's functionality can be signed and completed via a pop-up notification
• All dapp transactions where assets are sent/received show up in the account activity view within the extension

Transactions

• A QR code is visible for the generated address on Account Details
• Eth/ERC-20 tokens can be received at the addresses generated for your account
• Eth/ERC-20 tokens can be sent to other addresses from your account
• For send transactions, Gas is calculated appropriately and can be adjusted for different speeds

Accounts/Hardware

• Multiple accounts be created via the dropdown menu, whether new or imported
• An account can be created by connecting a Trezor hardware device
• An account can be created by connecting a Ledger hardware device
• ERC-20 assets can be added to the token list

Successful wallet creation

Ledger Nano connected

Trezor Connected

Successful transaction

Transaction notification

Dapp connect

Dapp sign

Insufficient funds

[radeksvarz]

Android is in the process of being re-written on top of Brave Core and it will support this feature after we add extension support here #4493.

Can you please elaborate, why it needs to wait for it?