Este site publica o prompt de auditoria e o relatório completo, com hash de cada arquivo e prova de data. A pergunta que o relatório responde é a de um usuário que nunca ouviu falar do desenvolvedor: este aplicativo pode roubar meus fundos, cobrar algo além do declarado ou fazer algo malicioso no meu aparelho?
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Prova de data (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
O arquivo .ots prova que o conteúdo existia no momento do carimbo; a confirmação chega no próximo bloco Bitcoin e pode ser verificada com ots verify.
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Arquivo auditado: 0x2ALL-1.0.37-e458456-release.apk
SHA-256b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
É o mesmo arquivo entregue em /download/apk: o SHA-256 confere com o version.json do site.
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
O SHA-256 e o timestamp OpenTimestamps provam que este texto existia na data declarada e não mudou depois. Eles NÃO provam que a auditoria é verdadeira ou independente. Isso só se obtém reproduzindo: o prompt é público exatamente para que qualquer pessoa o rode contra o código ou contra outro auditor e compare.
Baixe o prompt e aplique ao APK assinado: apksigner (assinatura e signatário), aapt2 (versão, permissões, componentes) e descompilação do DEX (jadx ou baksmali). O código-fonte não é necessário — o repositório é privado. Compare com as respostas: divergência é um achado.
Auditoria estática (nada executado em aparelho); correspondência fonte↔APK demonstrada por comparação de ZIP, não por build reprodutível; sem captura de tráfego; sem auditoria humana independente.
This site publishes the audit prompt and the full report, with a hash for every file and a date proof. The report answers the question of a user who has never heard of the developer: can this app steal my funds, charge me more than declared, or do something malicious on my device?
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Date proof (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
The .ots file proves the content existed at stamping time; confirmation arrives in the next Bitcoin block and can be checked with ots verify.
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Audited file: 0x2ALL-1.0.37-e458456-release.apk
SHA-256b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
This is the same file served at /download/apk: the SHA-256 matches the site's version.json.
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
The SHA-256 and the OpenTimestamps proof show that this text existed on the stated date and has not changed since. They do NOT prove the audit is true or independent. That requires reproduction: the prompt is public precisely so anyone can run it against the code or another auditor and compare.
Download the prompt and apply it to the signed APK: apksigner (signature and signer), aapt2 (version, permissions, components) and DEX decompilation (jadx or baksmali). The source is not required — the repository is private. Compare with the answers: any divergence is a finding.
Static audit (nothing executed on a device); source↔APK correspondence shown by ZIP comparison, not a reproducible build; no traffic capture; no independent human audit.
Este sitio publica el prompt de auditoría y el informe completo, con el hash de cada archivo y prueba de fecha. El informe responde a la pregunta de un usuario que nunca oyó hablar del desarrollador: ¿puede esta aplicación robar mis fondos, cobrar más de lo declarado o hacer algo malicioso en mi dispositivo?
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Prueba de fecha (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
El archivo .ots prueba que el contenido existía al momento del sellado.
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Archivo auditado: 0x2ALL-1.0.37-e458456-release.apk
SHA-256b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
Es el mismo archivo entregado en /download/apk: el SHA-256 coincide con el version.json del sitio.
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
El SHA-256 y la prueba OpenTimestamps muestran que este texto existía en la fecha indicada y no ha cambiado. NO prueban que la auditoría sea verdadera o independiente: eso exige reproducirla, y el prompt es público para eso.
Descargue el prompt y aplíquelo al APK firmado: apksigner (firma y firmante), aapt2 (versión, permisos, componentes) y descompilación del DEX (jadx o baksmali). El código fuente no es necesario: el repositorio es privado. Compare con las respuestas: una divergencia es un hallazgo.
Auditoría estática; correspondencia fuente↔APK por comparación de ZIP, no build reproducible; sin captura de tráfico; sin auditoría humana independiente.
Ce site publie le prompt d'audit et le rapport complet, avec le hash de chaque fichier et une preuve de date. Le rapport répond à la question d'un utilisateur qui n'a jamais entendu parler du développeur : cette application peut-elle voler mes fonds, facturer plus que déclaré ou faire quelque chose de malveillant sur mon appareil ?
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Preuve de date (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
Le fichier .ots prouve que le contenu existait au moment de l'horodatage.
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Fichier audité: 0x2ALL-1.0.37-e458456-release.apk
SHA-256b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
C'est le même fichier servi sur /download/apk : le SHA-256 correspond au version.json du site.
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
Le SHA-256 et la preuve OpenTimestamps montrent que ce texte existait à la date indiquée et n'a pas changé. Ils ne prouvent PAS que l'audit est vrai ou indépendant : cela exige une reproduction, et le prompt est public pour cela.
Téléchargez le prompt et appliquez-le à l'APK signé : apksigner (signature et signataire), aapt2 (version, permissions, composants) et décompilation du DEX (jadx ou baksmali). Le code source n'est pas nécessaire — le dépôt est privé. Comparez avec les réponses : toute divergence est un constat.
Audit statique ; correspondance source↔APK par comparaison ZIP, pas de build reproductible ; pas de capture de trafic ; pas d'audit humain indépendant.
本站发布审计提示词和完整报告，并附每个文件的哈希和日期证明。报告回答的是一个从未听说过开发者的用户的问题：这个应用会不会盗取我的资金、收取超过声明的费用，或在设备上做恶意的事情？
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
日期证明（OpenTimestamps）: prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
.ots 文件证明内容在打戳时已存在。
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
审计文件: 0x2ALL-1.0.37-e458456-release.apk
SHA-256b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
与 /download/apk 提供的文件相同：SHA-256 与站点 version.json 一致。
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
SHA-256 与 OpenTimestamps 证明该文本在所述日期已存在且此后未变。它们不能证明审计真实或独立；这需要复现，提示词公开正是为此。
下载提示词并对已签名的 APK 执行：apksigner（签名与签名者）、aapt2（版本、权限、组件）以及 DEX 反编译（jadx 或 baksmali）。不需要源代码——代码库是私有的。与报告中的回答对比：任何不一致即为发现。
静态审计；源码与 APK 的对应通过 ZIP 比对，而非可复现构建；无流量抓包；无独立人工审计。
Bu site denetim istemini ve tam raporu, her dosyanın hash'i ve tarih kanıtıyla yayınlar. Rapor, geliştiriciyi hiç duymamış bir kullanıcının sorusunu yanıtlar: bu uygulama fonlarımı çalabilir mi, beyan edilenden fazla ücret alabilir mi veya cihazımda kötü bir şey yapabilir mi?
Auditor: DeepSeek v4.1 Flash (1017) · 2026-10-26 · commit e458456
PT / prompt · EN / prompt · ES / prompt · FR / prompt · ZH / prompt · TR / prompt
Tarih kanıtı (OpenTimestamps): prompt-en.md.ots, prompt-es.md.ots, prompt-fr.md.ots, prompt-pt.md.ots, prompt-tr.md.ots, prompt-zh.md.ots, report-en.md.ots, report-es.md.ots, report-fr.md.ots, report-pt.md.ots, report-tr.md.ots, report-zh.md.ots
.ots dosyası içeriğin damgalama anında var olduğunu kanıtlar.
0x2ALL 1.0.37 (code 37) — 6,722,609 bytes
Denetlenen dosya: 0x2ALL-1.0.37-e458456-release.apk
SHA-256b92d28e743fd9bbd23a87178233faefb03f7b1dbcefc01b24588a0b156091f2f
Certificado53dac6cbe7edd6894b9377c4bbdc302a883abbe18a01ad2bd87d0a0fafa142c1
/download/apk üzerinden sunulan dosyanın aynısı: SHA-256, sitenin version.json dosyasıyla eşleşiyor.
prompt-en.md | 223b2610d3d6b1cdd6a1b17505921530e5eec5d09c2c385deabcce949855b820 |
prompt-es.md | da042434736e4fbda347953e6403728c2672484e4c8492b73ac52596da4a97bd |
prompt-fr.md | 072405c091270745c654907e6109f6d68889adde210b0dd72d2a1d7dd78a5cf0 |
prompt-pt.md | bd680635e70af60bc423e3aa89c95a3ec3cdeb3958819e8bcb987284c6960858 |
prompt-tr.md | c766ef3b24cac593d57cc3ca181c6298403fc618bf316d3db5adcca6d4008e62 |
prompt-zh.md | 4f954278bafc61ce463a5fc7b10ce84a73f6b541f29a6966b240b225a4b68f9b |
report-en.md | fde3051c871aacadf368bee846dc07162afe633f0ae60044e450bcabf1dd1c4c |
report-es.md | 334bdd46deda28ca5046be88eb6ad38c1b0b96d6a31412e859f88734a3c24799 |
report-fr.md | f3276435119ca5526869431a42a6d27214626273a89013550bca2d05816ba2c5 |
report-pt.md | 0ddd6e40c90f6d0aaec8f671684e3d80d5dbc0432d20055959cb7acdb26c7a51 |
report-tr.md | bfe0dd660364162fabce489d4615f360c0e95f1cf14f695ea0d68c328156ca46 |
report-zh.md | 4d0de313507ab0b971a0f4ba3d0b92ab2164a9395bdb536bdce6ac904aa655ba |
SHA-256 ve OpenTimestamps, metnin belirtilen tarihte var olduğunu ve değişmediğini gösterir. Denetimin doğru veya bağımsız olduğunu KANITLAMAZ; bunun için yeniden üretim gerekir ve istem bu yüzden herkese açıktır.
İstemi indirin ve imzalı APK'ya uygulayın: apksigner (imza ve imzalayan), aapt2 (sürüm, izinler, bileşenler) ve DEX derlemesini geri alma (jadx veya baksmali). Kaynak kod gerekmez — depo özeldir. Yanıtlarla karşılaştırın: herhangi bir sapma bulgudur.
Statik denetim; kaynak↔APK eşleşmesi ZIP karşılaştırmasıyla, yeniden üretilebilir derleme değil; trafik yakalama yok; bağımsız insan denetimi yok.