The Binance Android app is a Chinese surveillance suite…
0 reactions
The Binance Android app is a Chinese surveillance suite with a trading interface bolted on top
Was setting up a fresh Pixel for a friend getting into crypto. Pulled the APKs of his installed apps through a tracker scanner before handing it back. Binance was the worst by a wide margin.
The official Binance Android APK ships with SDKs from ByteDance (TikTok parent) and Tencent (WeChat parent), plus more than a dozen other trackers. Checked the AndroidManifest, they're declared at install time, not loaded dynamically. AppsFlyer, Branch, Adjust, Sensors Data, ByteDance Applog, Tencent Beacon.
Ad-tech SDKs aren't passive. They collect device fingerprints, behavioral signals, and can read clipboard contents on Android 9 and older without any prompt. On Android 10+ clipboard access still works while the app is in the foreground, which is most of the time you're using a crypto app. The clipboard is where wallet addresses and seed phrases get pasted.
ByteDance and Tencent have spent years under US and EU scrutiny over data handovers. Embedding their telemetry into an app holding user funds, KYC documents, and 2FA seeds is a different risk surface than a video app.
if you want to verify this yourself:
\- Exodus Privacy (reports exodus-privacy& search "Binance")
\- NetGuard (no-root firewall, see which domains apps reach in real time)
\- AppXpose (scans installed APKs directly on your Android device)
\- PCAPdroid (capture and inspect actual network traffic from any app)
good luck sleeping after that
#cryptocurrency
Was setting up a fresh Pixel for a friend getting into crypto. Pulled the APKs of his installed apps through a tracker scanner before handing it back. Binance was the worst by a wide margin.
The official Binance Android APK ships with SDKs from ByteDance (TikTok parent) and Tencent (WeChat parent), plus more than a dozen other trackers. Checked the AndroidManifest, they're declared at install time, not loaded dynamically. AppsFlyer, Branch, Adjust, Sensors Data, ByteDance Applog, Tencent Beacon.
Ad-tech SDKs aren't passive. They collect device fingerprints, behavioral signals, and can read clipboard contents on Android 9 and older without any prompt. On Android 10+ clipboard access still works while the app is in the foreground, which is most of the time you're using a crypto app. The clipboard is where wallet addresses and seed phrases get pasted.
ByteDance and Tencent have spent years under US and EU scrutiny over data handovers. Embedding their telemetry into an app holding user funds, KYC documents, and 2FA seeds is a different risk surface than a video app.
if you want to verify this yourself:
\- Exodus Privacy (reports exodus-privacy& search "Binance")
\- NetGuard (no-root firewall, see which domains apps reach in real time)
\- AppXpose (scans installed APKs directly on your Android device)
\- PCAPdroid (capture and inspect actual network traffic from any app)
good luck sleeping after that
#cryptocurrency
| 3,000 mlx | |
| 9 | |
| 0 |