Air-gapped signing. For everyone.

• Six independent checks tie every signature to the exact bytes the user reviewed, confirmed by running them.
• 4,000 deliberately malformed QR inputs, every one refused safely.
• The signing engine rebuilds byte for byte from the tagged source, and the app links no networking framework.

Open, LowThe extra confirmation for high-risk requests is enforced by the app's interface, but not yet by the engine itself. The report recommends fixing it in 1.0.1.

• Recovery phrases come from the iOS secure random generator. Any error stops wallet creation, with no weak fallback.
• The High finding of the previous round, about Safe multisig transactions, and its two Low findings were verified as fixed.
• 210 engine tests and 177 app tests passed; 1,509 protocol mutation cases showed no anomaly.

Open, LowA Bitcoin transaction that burns coins and also returns change can be summarized as "every output returns to your wallet" on the result screen and in Activity. The signing screen itself shows the burn and its amount correctly.

• No password bypass, no way to sign anything but the reviewed and matched request, and no path that extracts the recovery phrase or private keys.
• No Internet permission and no networking code. Screens stay out of screenshots and Recents, and backups and device transfer are excluded.
• 2,075 app tests and 217 engine tests passed, and the engine rebuilt from source is byte-identical to the copy inside the APK.

Open, MediumA Solana authority change or delegation sent together with a tiny transfer is summarized as that transfer (its warnings and the risk acknowledgement remain); Bitcoin change is accepted at any address index, where watch-only wallets may not look; and the release signing key was kept on the development machine. The report recommends fixing these three before the app protects valuable wallets.

• Three earlier findings verified as fixed: overlay-proof Sign and risk controls, wiping of secrets when an operation is cancelled, and resuming an interrupted QR scan.
• Only the wallet password authorizes a signature. Biometric App Lock never does, and stale work is dropped after a cancellation.
• 1,616 Android tests passed, the engine rebuilt byte for byte, and the release build has no network permission.

Open at that revisionA tiny Solana transfer could hide a burn or an authority change in the summary, and a Bitcoin burn with change could read "every output returns to your wallet". The report advised holding a general release for valuable wallets. The later Opus 5.5 review of the release found the burn cases fixed; the authority case remains as its first Medium finding.