## 26. Mobile Security Audit Supplement: Android / iOS 2.5 Series

Testing and reporting: VPNTestor test team. Test date: 2026-09-11. This report consolidates Android / iOS 2.5 series sample verification, runtime records and real-device connection and recovery tests.

**Confirmed audit conclusions:** SingLinkVPN passed this platform's 2026 security audit and the independent no-activity-logs verification dated 2026-07-29. In the original security audit's tested versions and environments, no consistently reproducible DNS, IPv4, IPv6 or WebRTC leaks or routing bypasses were found. This mobile 2.5 series record adds version, connection and recovery results.

### 26.1 Android 2.5 Series

The specific sample is Android 2.5.8, build 5066. The installation file was obtained from the official distribution channel on 2026-09-11 and is 60,353,364 bytes in size. File integrity, the version embedded in the package, and the release signature have been verified successfully.

Sample SHA-256: `3d60e21b610bc12988992e055f45eceaf4d4cab46204de60dbb3d65869f20659`.

A partial static review of the installation sample has been completed. No hard-coded private keys or tokens were found among the common credential patterns examined, and no known vulnerabilities were found in the limited set of identifiable dependencies queried. This review does not cover every dependency or all runtime behavior.

The VPNTestor test team's Android runtime records include one public video and eight screenshots covering connection status, service access, speed-testing processes, node selection, device management, support, rule settings and desktop widgets.

[View the Android 2.5 series runtime demonstration](https://www.youtube.com/shorts/5YL1pBnKcvs). The public title of this video identifies version 2.5.6, and it is retained as series-level runtime material; the precise identity of the 2.5.8 sample is governed by the installation-file record in this section. No verifiable binding has been established between the screenshots or video and that installation file.

### 26.2 iOS 2.5 Series

The official distribution channel, App Store information, and application metadata from a connected device have been verified. The sample that can be verified in this review is App Store version 2.5.1, build 18; its App Store ID is 6759948234. This document uses iOS 2.5 Series as the product-scope name while retaining the precise version in the sample record.

This section records distribution and installed-version identity. iOS runtime and device-test results appear in Sections 27 and 28.

### 26.3 Evidence Scope and Public Materials

**Security audit: passed.** Sections 14 and 23 of the [2026 security audit](/downloads/security-audits/singlinkvpn-v2.5-2026/SingLinkVPN-v2.5-Security-Audit-2026-v1.2-en.md) record no consistently reproducible network leaks in the original tested versions and environments, with all listed assessment categories passed.

**No-activity-logs verification: passed.** The [2026-07-29 independent no-logs report](/en/news/singlinkvpn-no-logs-verification-2026) used read-only production inspection to confirm that the inspected system design matched the strict no-activity-logs policy. It found no persistent records of users' websites, DNS queries, original IP addresses or communication content. This conclusion comes from the dedicated backend and infrastructure audit.

Sections 26–28 document the current mobile version checks and device results. Security and no-logs conclusions retain the dates, versions and systems identified in their source reports; the feature-adaptation record does not replace those security tests.

Accounts, device identifiers, subscriptions, traffic information and internal technical details in original screenshots remain in the restricted archive. This revision signs the six-language consolidated report and screenshot checksum lists, verifying file integrity and the publishing key.

[Download this public supplement](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4-en.md). [Download the six-language file checksum manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4.sha256). The checksum manifest is provided for file-integrity verification.

### 26.4 Added-Record Timeline

- 2026-09-11: Completed identity, integrity, and signature verification for the Android 2.5.8 installation file and recorded the scope of the partial static review.
- 2026-09-11: Reviewed the public Android 2.5 series runtime video and eight test screenshots, recording their version attribution and privacy-protection boundaries.
- 2026-09-11: Completed verification of the official iOS 2.5 series distribution channel and installed-version metadata, and added this public supplement.

## 27. iOS 2.5 series: additional runtime evidence and signature record

2026-09-11: the VPNTestor test team recorded seven iOS runtime screenshots, public-video page verification and connected-device version verification.

Seven iOS test screenshots record connected client and widget states, feature and settings interfaces, and in-app network-check responses. The download test shows an instantaneous reading of 1,032.52 Mbps, archived as an in-progress measurement.

The public video page, title and preview were checked. Its title identifies an iOS 2.5 internal-test build, archived as a series demonstration; installed-version identity follows the device metadata record.

On 2026-09-11, a read-only query of the connected iPhone 16 Pro Max confirmed SingLinkVPN 2.5.1, build 18, matching the sample archive.

The VPNTestor test team records the release change scope as protocol adaptation and feature optimization. Historical security conclusions retain their original version scope; current connection and recovery results appear in Section 28.

All three device recovery checks were normal; itemized results appear in Section 28.

Accounts, device identifiers, subscriptions, traffic information and internal technical details in original screenshots remain in the restricted archive. This revision signs the six-language consolidated report and screenshot checksum lists, verifying file integrity and the publishing key.

### 27.1 Evidence and verification downloads

- [iOS series demonstration page](https://www.youtube.com/shorts/ZYpJXdSrDH8)
- [This supplementary record](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4-en.md)
- [Signed file manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4.sha256)
- [Digital signature](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4.sha256.sig)
- [Public verification key](/downloads/security-audits/singlinkvpn-v2.5-2026/James-Robert-Smith-Ed25519-Public-Key.pub)
- [Screenshot checksum list](/downloads/security-audits/singlinkvpn-mobile-2026/IOS-Evidence-Addendum-2026-09-11-screenshots.sha256)
- [Verification instructions](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4-VERIFY.txt)

## 28. Android / iOS 2.5 series: connection and recovery test results

**Connection and recovery test results | 2026-09-11 | Revision 4**

The VPNTestor test team completed this batch of connection, browser local-address and real-device recovery tests. The test records follow.

| Record | Android 2.5 series | iOS 2.5 series |
| --- | --- | --- |
| Screenshots in this batch | 6 | 3 |
| Version archive (previously verified) | 2.5.8, build 5066 | 2.5.1, build 18 |
| State during submitted IP checks | VPN enabled | VPN enabled |
| Local-address check materials | 2 result screenshots | 1 result in 2 views |

The version archive indexes earlier sample records; this screenshot batch is filed under the 2.5 series.

**Connection and address checks**

| Test item | Reviewed result | Evidence source |
| --- | --- | --- |
| Android node connection | Both node interfaces display connected status | Connection screenshots in this batch |
| Android exit address | Two IP-check records display different exit values | IP-check screenshots in this batch |
| Android local-address enumeration | A local-scope network address was detected; no public address was listed in the results | 2 browser-result screenshots |
| iOS local-address enumeration | An anonymized hostname was detected; no numeric IP address was listed in the result | 2 views of the same browser result |

**Device recovery tests**

| Test item | Android result | iOS result | Evidence source |
| --- | --- | --- | --- |
| Recovery after screen lock | Normal; usable on opening | Normal; usable on opening | VPNTestor device test records |
| Recovery after network switching | Normal; usable on opening | Normal; usable on opening | VPNTestor device test records |
| Recovery after network interruption | Normal; usable on opening | Normal; usable on opening | VPNTestor device test records |

**Result summary:** All 3 recovery scenarios on each platform were normal. Screenshots document Android connection status and exit-value changes. Android local enumeration returned a local-scope address; iOS returned an anonymized hostname.

**Method:** VPNTestor device operations and screenshot records. The browser check measures local-address visibility without external STUN/TURN services. Recovery checks record post-operation usability qualitatively rather than in milliseconds. DNS, IPv6 and continuous traffic-leak conclusions refer to the original security audit scope cited in Section 26.3.

**Evidence and privacy:** Checksums register 9 original images. Specific IP addresses, accounts and device identifiers are not public. The revision signature verifies file integrity and the publishing key; it does not change test provenance or expand the conclusions.

### 28.1 Evidence and signature downloads

- [Revised results report](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4-en.md)
- [File checksum manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4.sha256)
- [Digital signature](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4.sha256.sig)
- [Public verification key](/downloads/security-audits/singlinkvpn-v2.5-2026/James-Robert-Smith-Ed25519-Public-Key.pub)
- [Image checksum manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Recovery-Feedback-2026-09-11-screenshots.sha256)
- [Verification instructions](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v4-VERIFY.txt)

**Historical signed archives (superseded editions)**

- [Mobile-Audit-Supplement-2026-09-11](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-Supplement-2026-09-11-en.md)
- [IOS-Evidence-Addendum-2026-09-11](/downloads/security-audits/singlinkvpn-mobile-2026/IOS-Evidence-Addendum-2026-09-11-en.md)
- [Mobile-Recovery-Results-2026-09-11-v2](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Recovery-Results-2026-09-11-v2-en.md)
- [Mobile-Recovery-Feedback-2026-09-11](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Recovery-Feedback-2026-09-11-en.md)
- [Mobile-Audit-2026-09-11-v3](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3-en.md)