Docs
Testing Strategy
Correctness of cryptography first, then flows, then UI.
Suites
- Mnemonic & BIP-32 official vectors
- Address derivation per chain (incl. TRON, Solana SLIP-10)
- Transaction serialization & signing vectors
- Vault encrypt/decrypt and PIN-change re-encryption
- Deep link & QR parser fuzzing
- RPC failover tests
- Wallet migration tests
- API, database, extension, mobile, E2E and regression tests
Security testing
- Static analysis, dependency & secret scanning
- Mobile (MASVS) and extension pen-tests
- Backend penetration tests
Items marked NATIVE must be implemented as audited native code (Swift, Kotlin, Rust or C++), not in the web app.