Kraken Mobile Wallet
Audit · firm’s term: Security Assessment
Trail of Bits reviewed Kraken (Kraken Mobile Wallet) on 10 Jan 2024: 16 findings, 0 critical; 15 marked fixed, 1 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings24
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 7 |
| Low | 0 | 0 | 8 |
Marked Informational by the firm. Not counted as findings.
InformationalProject dependencies are not monitored for vulnerabilitiesOpen
The report gives no description here.
Informationalreact-native-argon2 is unmaintainedOpen
The report gives no description here.
InformationalSafetyNet Verify Apps and Play Integrity APIs not implemented in the Android clientOpen
The report gives no description here.
InformationalHard-coded Infura API keyFixed
The report gives no description here.
InformationalHarmony reuses the same HMAC key for signing proof-of-work challenges and image URLsFixed
The report gives no description here.
InformationalNo explicit verification of the Android security providerFixed
The report gives no description here.
InformationalThe QR code scanner is configured to detect all code typesFixed
The report gives no description here.
InformationalUsers may accidentally break wallet initializationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Kraken’s security record
KrakenSecurity firm
Trail of Bits29 projects reviewed · 47 reports · latest Sep 2026
See Trail of Bits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us