Case Study: Stack Wallet

Stack Wallet is an open source, non-custodial, multi-currency cryptocurrency wallet that prioritizes financial privacy and user control. We employed a custom methodology — one that involved targeting individual functionality and testing according to frameworks such as OWASP Mobile Application Security Testing Guide (MASTG).

During our examination, we identified a critical vulnerability which could potentially be abused to compromise the security of a user's local file system. Additionally, we discovered an issue that could lead to a denial-of-service condition. The audit also confirmed that several other potential attack vectors, such as HTML, SQL, or SVG injection, were not exploitable due to built-in protections. The findings from this security audit were crucial for ensuring the integrity of the Stack Wallet application and maintaining a robust security posture for its user base.