diop / apollo

Muun android wallet

About

This is the source code repository for muun's android wallet. Muun is a non-custodial 2-of-2 multisig wallet with a special focus on security and ease of use.

Structure

The app follows the clean architecture pattern, and has three layers:

• Data: handles the data backends, such as the database, the operating system, or the network.
• Domain: contains the models and business logic (use cases in clean architecture lingo).
• Presentation: contains the UI code.

There's also a pure java common module with code shared all over.

LibWallet

Setup

brew install golang
# Add your GOPATH to your bash profile
bash tools/bootstrap-gomobile.sh

• Set the ANDROID_HOME env var to the SDK installation path for Android Studio. Most likely ~/Library/Android/sdk/
• Install the Android NDK using Android Studio. Go to Tools > SDK Manager > SDK Tools and select NDK (Side by side).
• Take note of the SDK path it shows when the install process ends and set it as ANDROID_NDK_HOME env var. It should of the form ~/Android/sdk/ndk/20.0.5594570

Building for Android

GO111MODULE=off go run golang.org/x/mobile/cmd/gomobile bind -target=android -o android/apollo/libs/libwallet.aar github.com/muun/muun/libwallet

Auditing

• Most of the key handling and transaction crafting operations happen in the common module.
• All the keystore and data handling happens in the data layer.
• All the business logic that decides when to sign what happens in the domain layer.
• The presentation layer only depends on the domain layer, it never references data directly.

Veryfing our builds

Our builds are not reproducible yet! Stay tuned.

Responsible Disclosure

Send us an email to report any security related bugs or vulnerabilities at [e-mail].

You can encrypt your email message using our public PGP key.

Public key fingerprint: 1299 28C1 E79F E011 6DA4 C80F 8DB7 FD0F 61E6 ED76