Kraken Mobile Wallet
Audit · firm’s term: Security Assessment
Trail of Bits reviewed Kraken (Kraken Mobile Wallet) on 10 Jan 2024: 16 findings, 0 critical; 15 marked fixed, 1 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings24
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 7 |
| Low | 0 | 0 | 8 |
MediumFee amounts are not displayed and can be controlled by remote servicesFixed
The report gives no description here.
MediumHarmony proof of work allows attacker to tamper with expirationFixed
The report gives no description here.
MediumLocal biometric and password authentication can be bypassedFixed
The report gives no description here.
MediumMissing certificate validation in electrum-clientFixed
The report gives no description here.
MediumThird-party applications can take and read screenshots of the Android client screenFixed
The report gives no description here.
MediumTruncated message content when signing via WalletConnectFixed
The report gives no description here.
MediumWalletConnect transaction confirmation screen may be suddenly switchedFixed
The report gives no description here.
LowAbsence of account lockout mechanismFixed
The report gives no description here.
LowApplication crashes when SVG image is tapped twice in the NFT moduleFixed
The report gives no description here.
LowDevice-to-device backups are not disabledFixed
The report gives no description here.
Show 5 more
LowExposure of misconfigured GCP API keyFixed
The report gives no description here.
LowPassword policy issues on extra password protectionFixed
The report gives no description here.
LowRemoval of URL protocol when pairing with WalletConnectFixed
The report gives no description here.
LowSensitive content exposed via ClipboardFixed
The report gives no description here.
LowUse of unpinned third-party scripts and images in CIFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Kraken’s security record
KrakenSecurity firm
Trail of Bits29 projects reviewed · 47 reports · latest Sep 2026
See Trail of Bits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us