3rd Party Independent Security Audit of the D’CENT Wallet

3rd Party Independent Security Audit of the D’CENT Wallet

At IoTrust we do not believe that a company can just manufacture a security device and declare it to be trustworthy. We believe that the security of a device must be verified independently.



The security of our D’CENT Biometric Wallet has been confirmed by a trusted third party. The audit provides independently prepared evidence that D’CENT Biometric Wallet holders may continue to be confident in the security of our cold storage tools.


After reading this blog entry you will understand that the third-party security audit verifies that IoTrust is truly committed to “delivering trusted connectivity”.


This week Coinspect, an independent security evaluation laboratory best known for performing security audits of Bitcoin Core, ZCash, and various other wallet solutions, completed its security evaluation of the D’CENT Biometric Wallet.


The D’CENT Biometric Wallet uses a dual-chip architecture with the main MCU (STM32 chip) handling control of the device peripherals, managing the connection to the host computer, and parsing of cryptocurrency transactions. The MCU also acts as a proxy to the Secure Element (an NXP chip), where it performs cryptographic operations using secret keys stored in its protected memory.


In the security evaluation, Coinspect consultants reviewed the source code of the MCU firmware and Secure Element applets. Analysis of the source code included a review of resistance of the product to various state-of-the-art attacks. The audit included attacks that exploit key management, transaction signing, and other malicious threats.


Coinspect identified a few minor issues. None of the issues identified were significant enough that an attacker could steal funds from a D’CENT Biometric Wallet using an exploit isolated from a host computer.


In April 2019, Coinspect reviewed IoTrust’s remedies for the issues previously identified. They concluded that the fixes implemented were correct. These issues are now considered resolved.

[D’CENT ウォレット]
D’CENTは、(株)IoTrustが製造・販売するブロックチェーン向けウォレットサービスです。 当社は、セキュリティチップ(SEおよびTEE)を基にする、エンベディット(組み込み)型ソリューションにおいて15年以上開発経験を持つスペシャリスト達によって制作されたウォレットです。さらに、銀行カードやUSIMカードで使われる高セキュリティテクノロジーの応用技術が含まれた、安心と信頼のウォレットです。 

このブログは教育目的のみを目的としています。ここに記載されている情報は、プロジェクトやブランド名を含め、情報提供を目的としており、金融、法律、税務アドバイスではありません。正確性に努めていますが、情報の誤りに対しては一切責任を負いません。 暗号資産(あんごうしさん)は本質的にリスクを伴います。徹底的に調査を行い、ご自身の目標とリスク許容度に見合った投資判断を行うために、ファイナンシャルアドバイザーへの相談を検討してください。 外部リンクが存在する場合がありますが、その内容や慣行に対しては一切責任を負いません。利用規約とプライバシーポリシーをご確認ください。

Biometric Wallet

"YOU are the Key" to Your Crypto Fortress! 
D'CENT Biometric - $119.00