Your Web3.
Your Control.
Take ownership of your digital assets with a wallet designed around control, clarity and confidence.
- Custody Model
- 100% On-Device Keys
- Vault Encryption
- AES-256-GCM
- Release Stage
- Testnet Validation
Account 1 · Self-Custody Vault
Active addresses derived on-device via BIP-39 / BIP-44 / BIP-84.
Ethereum Sepolia
EVM · ID 11155111
— ETH
0x... (EIP-55)
BSC Testnet
EVM · ID 97
— tBNB
0x... (EIP-55)
Polygon Amoy
EVM · ID 80002
— POL
0x... (EIP-55)
TRON Nile Testnet
TVM · Base58Check
— TRX
T... (34 chars)
Bitcoin Testnet
UTXO · Native SegWit
— BTC
tb1q... (Bech32)
Product Foundation
Self-custody engineered to remove ambiguity.
Most crypto wallets leave users guessing between opaque transaction payloads, incompatible address formats, and unclear custody assumptions. SANITHIUM separates key sovereignty from network noise—keeping cryptographic signing local while making every transaction legible before authorization.
01 / NO CUSTODIAL INTERMEDIARIES
Zero server-side keys
Mnemonics and derived private keys are created and encrypted strictly on your mobile device. No SANITHIUM server can sign, freeze, or recover user wallets.
02 / CROSS-CHAIN GUARDRAILS
Protocol-aware validation
Unified address validation rejects incompatible recipient formats across EVM, TRON, and Bitcoin before a transaction is ever constructed.
03 / TAMPER-LOCKED SIGNING
What you review is what you sign
Transaction Integrity Binding cryptographically verifies that reviewed recipient, amount, network, and fee parameters match the payload passed to the local signer.
04 / HONEST RELEASE DISCIPLINE
Testnet safety enforcement
During validation, software safety guards actively block mainnet chain IDs and addresses so testing remains strictly isolated from real-value production networks.
Product Preview
Walk through every verified wallet flow before launch.
Because public binaries and live screenshots are still in validation, each screen below models the exact Flutter application workflow without inventing balances or transaction histories.
Write your numbered phrase offline. SANITHIUM cannot restore a lost recovery phrase.
- Mandatory unskippable self-custody loss acknowledgement
- Challenge-word verification confirms physical backup
- 6-digit PIN derives PBKDF2-HMAC-SHA256 wrapping key
Verified Capabilities
Built for deterministic clarity across every core flow.
01 · Key Creation & Import
BIP-39 wallet generation and verified recovery import
Generate 12-word (128-bit) or 24-word (256-bit) recovery phrases on-device with mandatory custody acknowledgement and word-challenge backup verification, or import existing 12, 18, or 24-word phrases with strict checksum validation.
- Client-side cryptographic entropy generation via platform secure random
- Interactive word-position backup challenge before vault activation
- Android screenshot and app-switcher preview blocking (FLAG_SECURE)
02 · Encrypted Local Vault
Two-tier AES-256-GCM vault wrapped by PBKDF2 PIN keys
Recovery phrases never leave your device. They are encrypted under a random 256-bit master key (AES-256-GCM), which is wrapped by a key derived from your 6-digit PIN via 100,000 rounds of PBKDF2-HMAC-SHA256.
- Domain-separated 32-byte salts for PIN verification and key wrapping
- Constant-time PIN comparison and exponential lockout (24h soft lock at 10 failures)
- Immediate background auto-lock plus 2-minute inactivity timeout
03 · Portfolio & Asset Clarity
Unified multi-chain asset registry with explicit network context
View native coins and verified token contracts grouped strictly by network family, with resilient RPC health checks, 60-second price caching, and explicit stale-data or testnet indicators.
- Explicit asset-to-network compatibility guards prevent mislabeled tokens
- Failover across multiple configured public RPC endpoints per network
- Clear stale-cache banner whenever RPC connectivity degrades
04 · Send, Receive & Pre-Sign Integrity
Cross-chain address protection and tamper-locked transaction review
Before any signature occurs, SANITHIUM validates recipient address syntax per chain family, previews full gas/fee breakdowns, and cryptographically binds the reviewed payload to the local signer.
- UnifiedAddressValidator blocks EVM/TRON/Bitcoin cross-chain paste errors
- Human-readable review displays recipient, asset, nonce, gas limit, and max fee
- TransactionIntegrityBinding detects payload tampering between review and signing
05 · WalletConnect v2 Integration
Scoped dApp sessions with built-in calldata decoding
Connect to decentralized applications using WalletConnect v2 (Reown WalletKit), constrained strictly to Ethereum Sepolia with explicit method allowlisting and calldata inspection.
- Allowlisted methods only: eth_sendTransaction, personal_sign, eth_signTypedData_v4
- Blocks dangerous raw eth_sign and any key/mnemonic export methods
- CalldataDecoder decodes ERC-20 transfer(address,uint256) and flags unknown contract calls
Security Philosophy
Verifiable engineering, stated without exaggeration.
Security credibility comes from honest technical boundaries—not marketing superlatives. SANITHIUM pairs AES-256-GCM local vault wrapping, PBKDF2-HMAC-SHA256 PIN hardening, and Android screenshot blocking with clear disclosure that independent third-party security auditing has not been completed.
Transparency & Custody Disclaimer
SANITHIUM does not claim an independent external security audit, certification, or insurance coverage, and makes no guarantee of security. You are solely responsible for protecting your recovery phrase and private keys; if lost, neither you nor SANITHIUM can restore wallet access.
Self-Sovereign Key Generation & Non-Recoverability
12-word or 24-word BIP-39 recovery phrases are generated strictly on the user's device using platform cryptographically secure random sources. SANITHIUM stores zero keys on any server and cannot reset, recover, or restore a lost phrase.
Reviewed against CryptoProvider & SecurityWarningScreen.
Two-Layer Vault Encryption
The recovery phrase is encrypted with AES-256-GCM (128-bit authentication tag, 12-byte random IV) using an ephemeral 256-bit K_MASTER, which is itself wrapped by K_PIN derived from a 6-digit PIN via PBKDF2-HMAC-SHA256 (100,000 iterations, separate 32-byte auth and encryption salts).
Reviewed against WalletVault & PinService.
Progressive Rate Limiting & Constant-Time Verification
PIN verification compares derived tokens in constant time to resist timing side-channels. Four failed attempts enforce a 30-second delay, attempts 5–9 apply quadratic minute lockouts (1, 4, 9, 16, and 25 minutes), and 10 consecutive failures enforce a 24-hour soft lockout requiring recovery phrase re-import.
Reviewed against PinService.
Single-Use Signing Scope & Integrity Binding
Every transaction requires explicit PIN confirmation producing a 60-second single-use SigningAuthorizationScope. TransactionIntegrityBinding ensures the exact network, recipient, value, and fee shown on the review screen match the payload signed offline.
Reviewed against SecureTransactionSigner & TransactionIntegrityBinding.
Supported Networks
Five verified testnet protocols. Clear status on mainnet.
Only networks actively implemented in the wallet's NetworkRegistry are listed below. Production mainnets remain under development and are blocked in current runtime builds.
| Network | Family | Chain ID | Derivation Path | Current Status |
|---|---|---|---|---|
| Ethereum Sepolia | EVM | 11155111 | m/44'/60'/0'/0/0 | Testnet Only · Broadcast & dApps Active |
| BNB Smart Chain Testnet | EVM | 97 | m/44'/60'/0'/0/0 | Testnet Only · Adapter Ready |
| Polygon Amoy | EVM | 80002 | m/44'/60'/0'/0/0 | Testnet Only · Adapter Ready |
| TRON Nile Testnet | TRON / TVM | N/A (TVM) | m/44'/195'/0'/0/0 | Testnet Only · Adapter Ready |
| Bitcoin Testnet | Bitcoin UTXO | N/A (UTXO) | m/84'/0'/0'/0/0 | Testnet Only · Adapter Ready |
Explore SANITHIUM
Direct custody without unnecessary noise.
Inspect the wallet product walkthrough, review our technical security architecture, or reach the team regarding validation updates and strategic enquiries.
Built by Tech2Home Labs
SANITHIUM is a Web3 wallet product developed by Tech2Home Labs, an independent technology company building digital products and software solutions.