Cold wallet app#504
Open
n13 wants to merge 2 commits into
Open
Conversation
A new standalone Flutter app (com.quantus.coldwallet) that acts as an offline hardware-wallet-style signer, Keystone/UR compatible: - Setup: create/import (BIP39 12 or 24 words with autocomplete), password (Argon2id + AES-GCM) vault in the platform secure element, optional biometric unlock, and a secure-element warning when unavailable. - Operation: Show Key (static address QR + human checkphrase) and Sign Transaction (scan multi-part UR QR, parse + display plaintext details, sign with ML-DSA, emit signature as an animated UR QR). - Air-gap enforcement: INTERNET permission removed on Android, plus a connectivity guard overlay that blocks use whenever a network is up; re-locks on backgrounding. DRY: the >256-byte Blake2b signing-payload rule (which hot wallet, cold wallet, and chain must agree on) is unified into a single source of truth, QuantusSigningPayload.signablePayload, now used by both the SDK's encodedPayloadToSign and the cold wallet. melos: register cold-wallet-app in the workspace.
Replace the shared Quantus mark with a frozen, ice-crystal rendering of the Q to visually signal the air-gapped cold wallet. - iOS / legacy Android: full edge-to-edge frosted square. - Android adaptive: transparent Q-glow foreground over a glacial navy gradient background, so the 16% safe-zone inset blends seamlessly with no visible card seam and the mark stays fully inside the mask. - Drop the now-unused orange quantus_icon_* source assets.
Collaborator
Author
|
dewabisma
reviewed
Jun 3, 2026
Collaborator
dewabisma
left a comment
dewabisma
left a comment
There was a problem hiding this comment.
Maybe we can have a shared folder for both mobile app? Instead of duplicating the component and styling and everything since both need to be in same design system anyway.
So, if we need to adjust design we don't have to do it twice.
Like the logo, Q with cold vibe :D
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Cold wallet - installed on an unused phone in offline mode
This basically a hardware wallet that can go on any phone, and is used with the Quantus Mobile Wallet as a signer.
Use any phone in offline mode, for security that phone shouldn't be used for anything else and be in airplane mode at all times.