ethereum / ethereum-org-website

Ethereum.org is a primary online resource for the Ethereum community.
https://ethereum.org/
MIT License
5.06k stars 4.81k forks source link

Suggest a wallet: Numio #6715

Closed milvinae closed 2 years ago

milvinae commented 2 years ago

Wallet name

Numio

Wallet description

Numio is a non-custodial, Layer 2 DeFi app, powered by zkRollups for fast and cheap ERC-20 transactions and token swaps. Numio is available on Android and iOS.

Wallet logo

numio-icon

Background color for brand logo

3F3F3F

URL to the project

https://www.numio.one/

When did the wallet go live to users?

31/12/2020

Does the wallet have an active development team?

https://docs.numio.one/development/changelog

Is the wallet globally accessible?

Numio is globally accessible via the Google Play and Apple App Stores. The app requires no KYC to use.

Is the wallet available in multiple languages?

English

What social links are there for the project?

https://twitter.com/GetNumio/ https://www.tiktok.com/@getnumio https://www.facebook.com/GetNumio https://www.linkedin.com/company/numioinc/

Does the wallet have a mobile app? If yes, which operating systems are supported (iOS, Android)?

iOS - https://apps.apple.com/us/app/numio/id1538072952 Android - https://play.google.com/store/apps/details?id=com.numio.pay

Does the wallet have a desktop app? If yes, which operating systems are supported (Windows, Mac, Linux)?

No

Does the wallet have a browser extension? If yes, which browsers are supported (Chromium, Firefox, Safari)?

No

Is it a hardware wallet?

No

Is the source code for the wallet fully open-source?

No. Numio is not open source, however elements of the application are. Open source elements include our CDN & SDK, zkSync API, NPM relayer, and various meta API’s. Our full open-source GitHub repo can be found here - https://github.com/TeamNumio/TeamNumio

What license is the wallet software released under?

We are currently closed source (proprietary). Our Multi-Layer L2 library will be released as PDL.

Who holds the private keys?

Numio is non-custodial - a user's key pair is generated locally on their phone and their private keys never leave their device. Only the user has access to their Private Keys, which are easily accessible via the settings menu.

If Numio were to disappear the user would still be able to access their funds in a 3rd party wallet.

Please describe the measures taken to ensure the wallet's security and provide documentation wherever possible

The app is constantly subject to multiple layers of QA testing before (and after) undergoing internal audits and penetration tests. Major releases undergo 3rd party security auditing.

Numio is a non-custodial mobile application focused on user security and UI/UX. A user's key pair is generated locally on their phone and their private keys never leave their device. Users sign their own transactions manually and only the encrypted data is transmitted.

While we do not currently have any of this audit data currently publicly available, we are looking to make something available in the near future.

We work closely with our partners, including zkSync, ZigZag, MoonPay, ParaSwap, and Storj, to ensure that their technology is integrated in accordance with their best practices. This can be verified with those teams.

Device permissions are only requested based on a user's choice of function and if essential to the operation of the application. Any permissions are at the minimum viable amount to ensure that a function works. Numio keeps up to date with all Google Play and App Store privacy requirements and describes, via custom modal and plain English, exactly what each permission is for.

Users are unable to capture the screen during the seed phrase screen and (optional) biometrics registrations screens to enhance users security. Seed phrases are not stored on the device.

Outside of secure blockchain technology, the Numio application uses SHA256/RSA256 for encryption both within the app, and as a byproduct of integrated technology, including FaceTech - https://dev.facetec.com/security-best-practices.

Numio has now been public for almost 18 months, and has been downloaded in excess of 15,000 times from Google Play and the App Store. There has not been a single significant security bug reported in that time. It is also worth noting that both the application and company were subject to significant due diligence by VC’s as part of our $1.25m seed investment round which was completed in July 2021.

Has the wallet's smart contract code been audited?

Please see response above

Does the wallet have an internal security team?

Yes - it is our Devops team which raises security vulnerabilities or issues

Any other security testing that should be noted?

No response

Spam protection?

Tokens are hidden by default and require a toggle to activate if the user does not hold them in their account.

Does the wallet support connecting to a hardware wallet?

No

Does the wallet support WalletConnect?

Yes

Does the wallet support importing Ethereum RPC endpoints?

No

Does the wallet support viewing and interacting with NFTs?

Yes

Does the wallet support connecting to Ethereum applications?

Yes, there are integrated dapps as well as the ability to interact with dapps via Wallet Connect

Does the wallet support staking directly?

Not currently - this is currently in development and will be in an upcoming release

Does the wallet support swaps directly?

Swaps are supported by Paraswap for Layer 1 and ZigZag for Layer 2 (zkSync)

Does the wallet support multi-chain networks?

Ethereum & zkSync with more currently being integrated

Does the wallet allow the user to customize gas fees?

No

Does the wallet support sending transactions to ENS addresses?

In development

Does the wallet support importing or automatically querying and displaying ERC-20 tokens?

We query the users asset and auto enable tokens - but we dont add tokens automaticlly if its not added to Numio - we do have permissionless token listings within the next 4 releases

Does the wallet support EIP-1559 (type 2) transactions?

Not currently

Does the wallet have fiat on-ramps through credit/debit cards, wire transfers, or bank transfers (ACH)?

MoonPay is fully integrated - more on-ramps are coming. You can also on-ramp via WalletConnect and zkSync

Does the wallet support withdrawals to fiat?

Not currently

Is the wallet a multi-signature wallet?

Not currently

Does the wallet support social recovery?

In development, with account abstraction support

Who can the ethereum.org team can contact regarding the wallet in future?

@kitey https://twitter.com/joelkite

Does the wallet have a dedicated support team?

support@numio.one Response time is within 24-48hrs however it is usually much faster than this

What educational resources/documentation do you provide to users?

https://docs.numio.one/ https://www.numio.one/blog/ https://www.numio.one/tokens/ https://www.numio.one/nfts/

Does the wallet have any integrated tools not mentioned above?

Registration

Numio gives you two registration options:

Both options allow you to download your private key.

Numio does not charge a fee to create a wallet on Layer 1 or Layer 2

NFT Gallery

Profit and Loss Graphs and Calculation

minimalsm commented 2 years ago

Does the wallet support importing or automatically querying and displaying ERC-20 tokens? We query the users asset and auto enable tokens - but we dont add tokens automaticlly if its not added to Numio - we do have permissionless token listings within the next 4 releases

I'm not sure I understand. If someone sends me a token, is it automatically shown in Numio?

mitdralla commented 2 years ago

Hi @minimalsm I can clarify here. Numio currently supports over 350 tokens in-app with market data, so if it is supported, yes it will show up with an asset balance if you either import a wallet with a that token or if it gets sent to your wallet.

If a user has tokens not currently supported in the app, the user will soon be able to permissionlessly add the token so it can be viewed with its associated data, similar in effect to how Meta Mask allows you to "add a token". I am attaching a graphic with an example.

image