Monerujo - Monero Wallet Security & Privacy Scorecard
Android
Transactions stay on the device and are broadcast directly to the Monero network. Exchange rate data is fetched from Kraken, Yadio, and the European Central Bank, and swap services are handled through Exolix. None of these services receive wallet keys or personal identity.
Best for
Monero holders who want a self-custody wallet
Findings
- 0 critical
- 0 high
- 1 medium
- 0 low
- 2 info
1 issue identified across security and privacy analysis.
Top security issues
- Cleartext Traffic Enabled for Monero Node Communication
- No Network Security Configuration Defined
Top privacy issues
- Cleartext Traffic Enabled for Monero Node Communication
- Exolix Exchange API JWT Token (Client-Side Service Account)
Full analysis
Monerujo - Monero Wallet
What This Means for You
Transactions stay on the device and are broadcast directly to the Monero network. Exchange rate data is fetched from Kraken, Yadio, and the European Central Bank, and swap services are handled through Exolix. None of these services receive wallet keys or personal identity.
Recommendation: Very Secure
Best For: Monero holders who want a self-custody wallet
Key Findings
Data Security - 0 findings
Network Security - 2 findings (1 medium, 1 info)
Code Safety - 0 findings
Privacy - 0 findings
Privacy Concerns
What Data is Collected
Monerujo collects no personal data. The app operates entirely on the device. Exchange rate lookups send only a request for current pricing, with no identifying information attached.
Third-Party Data Sharing
Exchange rate data is fetched from Kraken, Yadio, and the European Central Bank. Swap transactions are routed through Exolix. These services receive only the data required to fulfill their function (current rates, swap amounts) and do not receive wallet keys, address history, or identity.
Understanding the Scores
- Security: 96/100
- Privacy: 97/100
- Data Security: 100/100
- Network Security: 95/100
- Code Safety: 100/100
- Data Collection: 100/100
- Data Sharing: 100/100
- User Control: 100/100
Positive Security Features
- Optional Tor network routing keeps the user's IP address private when broadcasting transactions
- No advertising or behavioral tracking libraries are present in the app
- No personal data is collected or transmitted outside the device
- Wallet keys remain on the device at all times and are never sent to any server
Areas for Improvement
- Connections to external price-fetching and swap services could use stronger transport protections to reduce the risk of data being read on untrusted networks.
- Some network configuration settings do not apply the strongest available options, though this poses a low practical risk under typical usage conditions.
About This Analysis
App Details
- App: Monerujo - Monero Wallet
- Package: com.m2049r.xmrwallet
- Version: 4.1.7 'Exolix'
- Platform: Android
- Scan Date: 2026-03-21
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 96/100 |