← Voltar ao início
Auditoria — 0x2ALL
Este site publica o prompt de auditoria e o relatório completo, com hash de cada arquivo e prova de data. A pergunta que o relatório responde é a de um usuário que nunca ouviu falar do desenvolvedor: este aplicativo pode roubar meus fundos, cobrar algo além do declarado ou fazer algo malicioso no meu aparelho?
Veredicto
Edição v19 (esta): APROVADO — 0 achados abertos · binário 1.0.37 reauditado
4 decisões de design declaradas verificadas (DD1–DD4)
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
Relatório completo
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Prova de data (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
O arquivo .ots prova que o conteúdo existia no momento do carimbo; a confirmação chega no próximo bloco Bitcoin e pode ser verificada com ots verify.
Binário auditado
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Arquivo auditado: 0x2ALL-1.0.37-e458456-release.apk
SHA-256
b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado
53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
É o mesmo arquivo entregue em /download/apk: o SHA-256 confere com o version.json do site.
Arquivos e hashes (SHA-256)
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
O que o hash prova — e o que não prova
O SHA-256 e o timestamp OpenTimestamps provam que este texto existia na data declarada e não mudou depois. Eles NÃO provam que a auditoria é verdadeira ou independente. Isso só se obtém reproduzindo: o prompt é público exatamente para que qualquer pessoa o rode contra o código ou contra outro auditor e compare.
Como reproduzir
Baixe o prompt e aplique ao APK assinado: apksigner (assinatura e signatário), aapt2 (versão, permissões, componentes) e descompilação do DEX (jadx ou baksmali). O código-fonte não é necessário — o repositório é privado. Compare com as respostas: divergência é um achado.
Limitações declaradas no relatório
Auditoria estática (nada executado em aparelho); correspondência fonte↔APK demonstrada por comparação de ZIP, não por build reprodutível; sem captura de tráfego; sem auditoria humana independente.
← Voltar ao início
← Back to home
Audit — 0x2ALL
This site publishes the audit prompt and the full report, with a hash for every file and a date proof. The report answers the question of a user who has never heard of the developer: can this app steal my funds, charge me more than declared, or do something malicious on my device?
Verdict
v19 edition (this one): APPROVED — 0 open findings · 1.0.37 binary re-audited
4 declared design decisions verified (DD1–DD4)
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
Full report
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Date proof (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
The .ots file proves the content existed at stamping time; confirmation arrives in the next Bitcoin block and can be checked with ots verify.
Audited binary
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Audited file: 0x2ALL-1.0.37-e458456-release.apk
SHA-256
b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado
53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
This is the same file served at /download/apk: the SHA-256 matches the site's version.json.
Files and hashes (SHA-256)
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
What the hash proves — and what it does not
The SHA-256 and the OpenTimestamps proof show that this text existed on the stated date and has not changed since. They do NOT prove the audit is true or independent. That requires reproduction: the prompt is public precisely so anyone can run it against the code or another auditor and compare.
How to reproduce
Download the prompt and apply it to the signed APK: apksigner (signature and signer), aapt2 (version, permissions, components) and DEX decompilation (jadx or baksmali). The source is not required — the repository is private. Compare with the answers: any divergence is a finding.
Limitations declared in the report
Static audit (nothing executed on a device); source↔APK correspondence shown by ZIP comparison, not a reproducible build; no traffic capture; no independent human audit.
← Back to home
← Volver al inicio
Auditoría — 0x2ALL
Este sitio publica el prompt de auditoría y el informe completo, con el hash de cada archivo y prueba de fecha. El informe responde a la pregunta de un usuario que nunca oyó hablar del desarrollador: ¿puede esta aplicación robar mis fondos, cobrar más de lo declarado o hacer algo malicioso en mi dispositivo?
Veredicto
Edición v19 (esta): APROBADO — 0 hallazgos abiertos · binario 1.0.37 reauditado
4 decisiones de diseño declaradas verificadas (DD1–DD4)
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
Informe completo (EN)
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Prueba de fecha (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
El archivo .ots prueba que el contenido existía al momento del sellado.
Binario auditado
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Archivo auditado: 0x2ALL-1.0.37-e458456-release.apk
SHA-256
b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado
53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
Es el mismo archivo entregado en /download/apk: el SHA-256 coincide con el version.json del sitio.
Archivos y hashes (SHA-256)
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
Lo que el hash prueba — y lo que no
El SHA-256 y la prueba OpenTimestamps muestran que este texto existía en la fecha indicada y no ha cambiado. NO prueban que la auditoría sea verdadera o independiente: eso exige reproducirla, y el prompt es público para eso.
Cómo reproducir
Descargue el prompt y aplíquelo al APK firmado: apksigner (firma y firmante), aapt2 (versión, permisos, componentes) y descompilación del DEX (jadx o baksmali). El código fuente no es necesario: el repositorio es privado. Compare con las respuestas: una divergencia es un hallazgo.
Limitaciones declaradas
Auditoría estática; correspondencia fuente↔APK por comparación de ZIP, no build reproducible; sin captura de tráfico; sin auditoría humana independiente.
← Volver al inicio
← Retour à l’accueil
Audit — 0x2ALL
Ce site publie le prompt d'audit et le rapport complet, avec le hash de chaque fichier et une preuve de date. Le rapport répond à la question d'un utilisateur qui n'a jamais entendu parler du développeur : cette application peut-elle voler mes fonds, facturer plus que déclaré ou faire quelque chose de malveillant sur mon appareil ?
Verdict
Édition v19 (celle-ci) : APPROUVÉ — 0 constat ouvert · binaire 1.0.37 réaudité
4 décisions de conception déclarées vérifiées (DD1–DD4)
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
Rapport complet (EN)
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Preuve de date (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
Le fichier .ots prouve que le contenu existait au moment de l'horodatage.
Binaire audité
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Fichier audité: 0x2ALL-1.0.37-e458456-release.apk
SHA-256
b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado
53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
C'est le même fichier servi sur /download/apk : le SHA-256 correspond au version.json du site.
Fichiers et hashes (SHA-256)
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
Ce que le hash prouve — et ce qu'il ne prouve pas
Le SHA-256 et la preuve OpenTimestamps montrent que ce texte existait à la date indiquée et n'a pas changé. Ils ne prouvent PAS que l'audit est vrai ou indépendant : cela exige une reproduction, et le prompt est public pour cela.
Comment reproduire
Téléchargez le prompt et appliquez-le à l'APK signé : apksigner (signature et signataire), aapt2 (version, permissions, composants) et décompilation du DEX (jadx ou baksmali). Le code source n'est pas nécessaire — le dépôt est privé. Comparez avec les réponses : toute divergence est un constat.
Limites déclarées
Audit statique ; correspondance source↔APK par comparaison ZIP, pas de build reproductible ; pas de capture de trafic ; pas d'audit humain indépendant.
← Retour à l’accueil
← 返回首页
审计 — 0x2ALL
本站发布审计提示词和完整报告，并附每个文件的哈希和日期证明。报告回答的是一个从未听说过开发者的用户的问题：这个应用会不会盗取我的资金、收取超过声明的费用，或在设备上做恶意的事情？
结论
v19 版（本页）：通过 — 0 项未解决问题 · 已复审 1.0.37 安装包
已核实 4 项声明的设计决定（DD1–DD4）
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
完整报告（英文）
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
日期证明（OpenTimestamps）: prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
.ots 文件证明内容在打戳时已存在。
受审计的二进制
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
审计文件: 0x2ALL-1.0.37-e458456-release.apk
SHA-256
b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado
53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
与 /download/apk 提供的文件相同：SHA-256 与站点 version.json 一致。
文件与哈希（SHA-256）
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
哈希能证明什么——不能证明什么
SHA-256 与 OpenTimestamps 证明该文本在所述日期已存在且此后未变。它们不能证明审计真实或独立；这需要复现，提示词公开正是为此。
如何复现
下载提示词并对已签名的 APK 执行：apksigner（签名与签名者）、aapt2（版本、权限、组件）以及 DEX 反编译（jadx 或 baksmali）。不需要源代码——代码库是私有的。与报告中的回答对比：任何不一致即为发现。
报告声明的局限
静态审计；源码与 APK 的对应通过 ZIP 比对，而非可复现构建；无流量抓包；无独立人工审计。
← 返回首页
← Ana sayfaya dön
Denetim — 0x2ALL
Bu site denetim istemini ve tam raporu, her dosyanın hash'i ve tarih kanıtıyla yayınlar. Rapor, geliştiriciyi hiç duymamış bir kullanıcının sorusunu yanıtlar: bu uygulama fonlarımı çalabilir mi, beyan edilenden fazla ücret alabilir mi veya cihazımda kötü bir şey yapabilir mi?
Sonuç
v19 sürümü (bu sayfa): ONAYLANDI — 0 açık bulgu · 1.0.37 ikili dosyası yeniden denetlendi
Bildirilen 4 tasarım kararı doğrulandı (DD1–DD4)
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
Tam rapor (EN)
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Tarih kanıtı (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
.ots dosyası içeriğin damgalama anında var olduğunu kanıtlar.
Denetlenen ikili
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Denetlenen dosya: 0x2ALL-1.0.37-e458456-release.apk
SHA-256
b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado
53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
/download/apk üzerinden sunulan dosyanın aynısı: SHA-256, sitenin version.json dosyasıyla eşleşiyor.
Dosyalar ve hash'ler (SHA-256)
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
Hash neyi kanıtlar — neyi kanıtlamaz
SHA-256 ve OpenTimestamps, metnin belirtilen tarihte var olduğunu ve değişmediğini gösterir. Denetimin doğru veya bağımsız olduğunu KANITLAMAZ; bunun için yeniden üretim gerekir ve istem bu yüzden herkese açıktır.
Nasıl yeniden üretilir
İstemi indirin ve imzalı APK'ya uygulayın: apksigner (imza ve imzalayan), aapt2 (sürüm, izinler, bileşenler) ve DEX derlemesini geri alma (jadx veya baksmali). Kaynak kod gerekmez — depo özeldir. Yanıtlarla karşılaştırın: herhangi bir sapma bulgudur.
Raporda belirtilen sınırlar
Statik denetim; kaynak↔APK eşleşmesi ZIP karşılaştırmasıyla, yeniden üretilebilir derleme değil; trafik yakalama yok; bağımsız insan denetimi yok.
← Ana sayfaya dön