Stack Wallet

Stack Wallet is a non-custodial, multi-currency cryptocurrency wallet that prioritizes financial privacy and user control. Our engagement involved a detailed security assessment to identify and address vulnerabilities within the custom theme functionality.

During our examination, we identified a critical vulnerability related to how the application handles external theme files, which could potentially be abused to compromise the security of a user’s local file system. Additionally, we discovered an issue that could lead to a denial-of-service condition by allowing an attacker to exploit resource consumption during file processing. The audit also confirmed that several other potential attack vectors, such as HTML or SVG injection, were not exploitable due to built-in protections. The findings from this security audit were crucial for ensuring the integrity of the Stack Wallet application and maintaining a robust security posture for its user base.