Skip to main content
SANITHIUM

Features & Implementation Status

Every capability documented alongside its verified status.

Rather than obscuring development stage behind marketing copy, SANITHIUM distinguishes clearly between modules verified in code and expansion features still under validation.

01 · Key Creation & Import

BIP-39 wallet generation and verified recovery import

Implemented · Testnet Build

Generate 12-word (128-bit) or 24-word (256-bit) recovery phrases on-device with mandatory custody acknowledgement and word-challenge backup verification, or import existing 12, 18, or 24-word phrases with strict checksum validation.

  • Client-side cryptographic entropy generation via platform secure random
  • Interactive word-position backup challenge before vault activation
  • Android screenshot and app-switcher preview blocking (FLAG_SECURE)
  • Deterministic BIP-32/44/84 derivation across EVM, TRON, and Bitcoin
CryptoProvider & WalletDerivationServiceArchitecture Spec
Entropy: 128-bit / 256-bit CSPRNG
EVM Path: m/44'/60'/0'/0/0
TRON Path: m/44'/195'/0'/0/0
Bitcoin Path: m/84'/0'/0'/0/0

02 · Encrypted Local Vault

Two-tier AES-256-GCM vault wrapped by PBKDF2 PIN keys

Implemented · Local Device

Recovery phrases never leave your device. They are encrypted under a random 256-bit master key (AES-256-GCM), which is wrapped by a key derived from your 6-digit PIN via 100,000 rounds of PBKDF2-HMAC-SHA256.

  • Domain-separated 32-byte salts for PIN verification and key wrapping
  • Constant-time PIN comparison and exponential lockout (24h soft lock at 10 failures)
  • Immediate background auto-lock plus 2-minute inactivity timeout
  • Explicit byte-buffer zeroization after ephemeral signing operations
WalletVault & PinServiceArchitecture Spec
1. 6-Digit PIN + Salt_Auth / Salt_Enc
2. PBKDF2-HMAC-SHA256 (100,000 rounds) → K_PIN32 bytes
3. K_PIN wraps random K_MASTER (AES-256-GCM)128-bit tag
4. K_MASTER encrypts BIP-39 phrase locallyZeroized

03 · Portfolio & Asset Clarity

Unified multi-chain asset registry with explicit network context

Implemented · Testnet RPCs

View native coins and verified token contracts grouped strictly by network family, with resilient RPC health checks, 60-second price caching, and explicit stale-data or testnet indicators.

  • Explicit asset-to-network compatibility guards prevent mislabeled tokens
  • Failover across multiple configured public RPC endpoints per network
  • Clear stale-cache banner whenever RPC connectivity degrades
  • Zero fabricated balances or synthetic activity feeds
AssetRegistry & PortfolioControllerArchitecture Spec
AssetStandardStatus
Sepolia ETH/USDC/USDTNative / ERC-20Verified
BSC Testnet tBNB/USDTNative / BEP-20Verified
TRON Nile TRX/USDTNative / TRC-20Verified
Bitcoin Testnet BTCBech32 P2WPKHVerified

04 · Send, Receive & Pre-Sign Integrity

Cross-chain address protection and tamper-locked transaction review

Verified · Sepolia Broadcast Active

Before any signature occurs, SANITHIUM validates recipient address syntax per chain family, previews full gas/fee breakdowns, and cryptographically binds the reviewed payload to the local signer.

  • UnifiedAddressValidator blocks EVM/TRON/Bitcoin cross-chain paste errors
  • Human-readable review displays recipient, asset, nonce, gas limit, and max fee
  • TransactionIntegrityBinding detects payload tampering between review and signing
  • ConfirmationTracker monitors broadcast transaction receipt status on Ethereum Sepolia
SecureTransactionSigner & EthereumTestnetBroadcasterArchitecture Spec
Cross-Chain Paste Rejected

Pasting a T... TRON address into an EVM send field fails pre-flight validation immediately.

TransactionIntegrityBinding Active

Payload digest checked before local secp256k1 signature; broadcast verifies Keccak-256 hash match.

05 · WalletConnect v2 Integration

Scoped dApp sessions with built-in calldata decoding

Verified · Scoped to Sepolia

Connect to decentralized applications using WalletConnect v2 (Reown WalletKit), constrained strictly to Ethereum Sepolia with explicit method allowlisting and calldata inspection.

  • Allowlisted methods only: eth_sendTransaction, personal_sign, eth_signTypedData_v4
  • Blocks dangerous raw eth_sign and any key/mnemonic export methods
  • CalldataDecoder decodes ERC-20 transfer(address,uint256) and flags unknown contract calls
  • Rejects mainnet chain proposals while in testnet validation mode
ReownWalletConnectTransport & Web3RequestValidatorArchitecture Spec

Allowed Chain: eip155:11155111 (Ethereum Sepolia)

Mainnet chain IDs (eip155:1, 56, 137) are unconditionally rejected at proposal & request validation.

CalldataDecoder: 0xa9059cbb → ERC-20 transfer decoded
Unknown selectors → Explicit contract warning

06 · Swap Routing & Full History Feed

DEX quote proxy prototype and upcoming historical activity ledger

In Development · Not Live

An architecture for proxied swap quote comparison (0x Protocol) with slippage bounds and bounded ERC-20 approvals exists as a testnet prototype, alongside planned full multi-chain transaction history indexing.

  • Swap execution currently produces simulated testnet hashes only — not live settlement
  • Live receipt polling works per broadcast; unified cross-chain history feed is planned
  • Mainnet activation remains gated until security validation and audit scoping finish
SwapRepository (Phase 9 Prototype)Architecture Spec

Honest Feature Disclosure

Swap routing UI & 0x backend quote proxy exist as a testnet prototype returning simulated execution hashes. Live mainnet swaps and full multi-chain historical activity feeds are not yet released.

Ready to examine the cryptographic details?

Review our verified key hierarchy, threat boundaries, and OS protections.

Read Security ArchitectureInspect Supported Networks