Security

• Non-custodial: keys stay in your MWA wallet; EdgeORE cannot sign.
• Exact-message review, returned-bytes check, single submit, no resend on unknown outcome.
• Receipts signed with Android Keystore; the receipt checker verifies the integrity of signed receipt contents.
• Screen capture is blocked in release builds (FLAG_SECURE).
• No analytics, advertising or crash-reporting SDKs.

Report vulnerabilities privately following SECURITY.md (GitHub Security → Report a vulnerability when available). Never include seed phrases or private keys.