A Statement about Disclosing Bad Behaviors in Mobile Wallet Apps

CertiK research identified multiple critical vulnerabilities in mobile wallets — ranging from hidden/malicious functions that exfiltrate private keys and over-collection or exposure of personal data to bugs enabling remote code execution. The team followed responsible disclosure but encountered vendor resistance to public alerts, so they plan an anonymized, limited-disclosure campaign to raise community awareness and improve Web3 wallet security while withholding exploit-enabling details.