Product Overview
SANITHIUM Wallet
A non-custodial multi-chain mobile wallet engineered around local cryptographic control, transparent transaction review, and protocol-level address safeguards.
Built For
Self-sovereign individuals & technically demanding operators
Target Platforms
Flutter Mobile · Android Primary (iOS Parity)
TESTNET ONLY — Send only Ethereum Sepolia (Chain ID 11155111) testnet assets to this address.
Wallet Account
0x•••• •••• •••• ••••
Path: m/44'/60'/0'/0/0 · Derived only inside local device vault
No active mobile wallet session connected. Addresses and scannable QR codes are generated locally in the Flutter app.
ReceiveScreen and UnifiedAddressValidator. No active wallet session is connected on sanithium.io.Wallet Onboarding
Create or import without compromising entropy.
Every step of onboarding keeps cryptographic generation strictly on your device while forcing explicit backup confirmation before the vault unlocks.
Self-Custody Agreement
Before generating keys, onboarding requires explicit confirmation that SANITHIUM holds zero recovery phrases and cannot reset a lost wallet.
- Keys exist solely inside your device's encrypted vault.
- Loss of recovery phrase results in permanent loss of access.
- No support email, SMS, or account reset mechanism exists.
Create vs. Import
Two clean paths into self-custody.
New Wallet Generation
ImplementedGenerates 128-bit (12-word) or 256-bit (24-word) BIP-39 entropy locally using platform secure random. Requires acknowledgement of non-recoverability and completion of an interactive word challenge.
Existing Wallet Import
ImplementedImports 12, 18, or 24-word English BIP-39 phrases with whitespace normalization, dictionary matching, and checksum verification before sealing into the AES-256-GCM vault.
Send, Receive & Asset Views
Built to catch errors before broadcast.
Network-First Send Flow
Choose network and asset explicitly, validate destination address syntax via UnifiedAddressValidator, inspect dynamic gas or sat/vByte fees, and confirm with a 60-second integrity-bound PIN authorization scope.
Disambiguated Receive View
Displays network name prominently alongside QR code encoding, full monospace address inspection dialog, and explicit testnet deposit warnings.
Controlled Broadcast & Receipt Tracking
Verifies local Keccak-256 hash matches the RPC transaction hash returned by Ethereum Sepolia nodes and polls confirmation status through ConfirmationTracker.
Scope Transparency
Verified in current build vs. planned roadmap.
- • BIP-39 12/24-word creation & 12/18/24-word import with checksum checks
- • Two-layer AES-256-GCM vault + PBKDF2-HMAC-SHA256 (100k rounds) PIN lock
- • Multi-chain derivation: EVM, TRON, Bitcoin Native SegWit
- • Android FLAG_SECURE screen masking & allowBackup="false"
- • Portfolio balances & resilient multi-RPC failover (5 testnets)
- • Controlled transaction signing & Sepolia RPC broadcast + receipt polling
- • WalletConnect v2 dApp pairing + CalldataDecoder (Sepolia only)
- • Mainnet activation (currently blocked by TestnetSafetyGuard)
- • Production DEX swap execution (currently simulated testnet prototype)
- • Unified historical multi-chain transaction ledger screen
- • Runtime root / jailbreak blocking hook wiring in app startup
- • Native hardware-keystore biometric cipher binding in Kotlin/Swift
- • Hardware wallet companion signing & fiat on/off-ramp integration
- • Public Google Play / Apple App Store binary distribution
Public binary releases have not yet been published.
SANITHIUM Wallet is actively undergoing testnet validation. We do not host unverified APK files or list placeholder app store links. Official release links will be published exclusively on sanithium.io after validation milestones complete.