Brave for iOS protects privileged JS to native bridges by using random JavaScript handler names and security tokens. However, by altering window.braveBlockRequests property from scripts on the web page, these secret values can be stolen. The impact depends on which bridge is abused. As further features are implemented in the Brave, its potential risk tends to be increased.