Q2 2026 Security & Compliance Report67 incidents, $764M in losses, 88% from operational failures.
Get the report →
GIGANTIX TECHNOLOGY logo

GIGANTIX TECHNOLOGY

Audit name:

[PT] GIGANTIX TECHNOLOGY | Wallet | Mar2024

Date:

Apr 19, 2024

Table of Content

→Introduction
→Audit Summary
→Document Information
→System Overview
→Executive Summary
→Findings
→Appendix 1. Severity Definitions
→Appendix 2. Scope

Want a comprehensive audit report like this?

Introduction

We express our gratitude to the GIGANTIX TECHNOLOGY team for the collaborative engagement that enabled the execution of this Security Assessment.

The Gigantix Wallet application leverages cutting-edge technology to transform NFC-enabled chips into powerful cryptocurrency wallets. This transformation allows users to manage their digital assets efficiently and securely with just a simple tap on their mobile devices.

titlecontent
PlatformiOS, Android
Timeline04/03/2024 - 11/03/2024

    Review Scope

    iOShttps://apps.apple.com/nl/app/gigantix-wallet/id6471000595→
    Androidhttps://play.google.com/store/apps/details?id=com.gigantix.app→

    Protect your dApp with insights like these.

    Audit Summary

    Total10/10
    Security Score

    10/10

    Test Coverage

    \-

    Code Quality Score
    Documentation Quality Score

    \-

    9Total Findings
    9Resolved
    0Accepted
    0Mitigated

    The system users should acknowledge all the risks summed up in the risks section of the report

    Document Information

    This report may contain confidential information about IT systems and the intellectual property of the Customer, as well as information about potential vulnerabilities and methods of their exploitation.

    The report can be disclosed publicly after prior consent by another Party. Any subsequent publication of this report shall be without mandatory consent.

    Document

    NameMobile Application Penetration Test Report for GIGANTIX TECHNOLOGY
    Audited ByStephen Ajayi
    Approved ByStephen Ajayi
    Websitehttp://gigantix-wallet.com→
    Changelog12/02/2024 - Preliminary Report

    • Document

      Name
      Mobile Application Penetration Test Report for GIGANTIX TECHNOLOGY
      Audited By
      Stephen Ajayi
      Approved By
      Stephen Ajayi
      Website
      http://gigantix-wallet.com→
      Changelog
      12/02/2024 - Preliminary Report

    System Overview

    Application Overview

    The Gigantix Wallet application leverages cutting-edge technology to transform NFC-enabled chips into powerful cryptocurrency wallets. This transformation allows users to manage their digital assets efficiently and securely with just a simple tap on their mobile devices.

    Key Features

    1. NFC Integration: Utilizes NFC technology to facilitate seamless and swift transactions, enabling users to manage their cryptocurrency holdings through a simple tap.

    2. Cross-Platform Compatibility: Available for both iOS and Android operating systems, ensuring a wide range of device coverage and user accessibility.

    3. Security Measures: Employs robust security protocols to safeguard digital assets, providing peace of mind for users through enhanced protection mechanisms.

    Executive Summary

    Security score

    Upon auditing, the code was found to contain 0 critical, 0 high, 1 medium, and 4 low severity issues, leading to a security score of 8 out of 10. After remediation and reviewing the client's notes, all issues from the Flutter library have been resolved, resulting in a perfect security score of 10 out of 10.

    All identified issues are detailed in the “Findings” section of this report.

    Summary

    The thorough audit conducted on the customer's Mobile Wallet application has resulted in an aggregate score of 10. This score encapsulates the collective assessment of various facets of the mobile application, including its security features, user interface, functionality, performance, and compliance with industry standards.

    Scoring Methodologyarrow right

    Findings

    F-2024-1360Insecure Randomness
    Status
    fixed
    Severity

    Medium
    F-2024-1371Application Insecure Execution on Rooted Devices
    Status
    fixed
    Severity

    Low
    F-2024-1365Janus Signature Vulnerability in Application Signing
    Status
    fixed
    Severity

    Low
    F-2024-1363ARC Enforcement Lapse
    Status
    fixed
    Severity

    Low
    F-2024-1359Unsafe JNI Usage
    Status
    fixed
    Severity

    Low
    F-2024-1361Hardcoded API Keys
    Status
    fixed
    Severity

    Observation
    F-2024-1358Race Condition: Thread Unsafe Date Format Usage
    Status
    fixed
    Severity

    Observation
    F-2024-1356Unchecked Return Values
    Status
    fixed
    Severity

    Observation
    F-2024-1352Insecure Hash Function Usage -SHA1 Weakness
    Status
    fixed
    Severity

    Observation
    Code
    ―
    Title
    Status
    Severity
    F-2024-1360Insecure Randomness
    fixed

    Medium
    F-2024-1371Application Insecure Execution on Rooted Devices
    fixed

    Low
    F-2024-1365Janus Signature Vulnerability in Application Signing
    fixed

    Low
    F-2024-1363ARC Enforcement Lapse
    fixed

    Low
    F-2024-1359Unsafe JNI Usage
    fixed

    Low
    F-2024-1361Hardcoded API Keys
    fixed

    Observation
    F-2024-1358Race Condition: Thread Unsafe Date Format Usage
    fixed

    Observation
    F-2024-1356Unchecked Return Values
    fixed

    Observation
    F-2024-1352Insecure Hash Function Usage -SHA1 Weakness
    fixed

    Observation
    1-9 of 9 findings

    Uncover findings like these to secure your project.

    Appendix 1. Severity Definitions

    Severity

    Description

    Critical
    		These issues present a major security vulnerability that poses a severe risk to the system. They require immediate attention and must be resolved to prevent a potential security breach or other significant harm.

    High
    		These issues present a significant risk to the system, but may not require immediate attention. They should be addressed in a timely manner to reduce the risk of the potential security breach.

    Medium
    		These issues present a moderate risk to the system and cannot have a great impact on its function. They should be addressed in a reasonable time frame, but may not require immediate attention.

    Low
    		These issues present no risk to the system and typically relate to the code quality problems or general recommendations. They do not require immediate attention and should be viewed as a minor recommendation.

    • Severity

      Critical

      Description

      These issues present a major security vulnerability that poses a severe risk to the system. They require immediate attention and must be resolved to prevent a potential security breach or other significant harm.

      Severity

      High

      Description

      These issues present a significant risk to the system, but may not require immediate attention. They should be addressed in a timely manner to reduce the risk of the potential security breach.

      Severity

      Medium

      Description

      These issues present a moderate risk to the system and cannot have a great impact on its function. They should be addressed in a reasonable time frame, but may not require immediate attention.

      Severity

      Low

      Description

      These issues present no risk to the system and typically relate to the code quality problems or general recommendations. They do not require immediate attention and should be viewed as a minor recommendation.

    Appendix 2. Scope

    The scope of the project includes the following:

    Assets in Scope

    iOS Mobile Application - iOS Mobile Application
    Android Mobile Application - Android Mobile Application