## 26. Mobile Security Audit Supplement: Android / iOS 2.5 Series

Record date: 2026-09-11. Publishing entities: VPNTestor Platform / Openscore VPN.

This update adds records covering mobile sample verification and a review of runtime materials. The verification work listed below has been completed; the conclusions apply only to the specified samples and scope of evidence. The complete mobile security audit has not yet reached a final conclusion, and this record does not add a new security score.

### 26.1 Android 2.5 Series

The specific sample is Android 2.5.8, build 5066. The installation file was obtained from the official distribution channel on 2026-09-11 and is 60,353,364 bytes in size. File integrity, the version embedded in the package, and the release signature have been verified successfully.

Sample SHA-256: `3d60e21b610bc12988992e055f45eceaf4d4cab46204de60dbb3d65869f20659`.

A partial static review of the installation sample has been completed. No hard-coded private keys or tokens were found among the common credential patterns examined, and no known vulnerabilities were found in the limited set of identifiable dependencies queried. This review does not cover every dependency or all runtime behavior.

One public runtime video and eight submitted screenshots have been reviewed. The visible material includes the client connection status, network-service access and speed-testing processes, as well as interfaces for node selection, device management, customer support, rule settings, and desktop widgets. The materials were provided by the product team and reviewed by VPNTestor; this is a different type of evidence from physical-device testing independently performed by the audit team.

[View the Android 2.5 series runtime demonstration](https://www.youtube.com/shorts/5YL1pBnKcvs). The public title of this video identifies version 2.5.6, and it is retained as series-level runtime material; the precise identity of the 2.5.8 sample is governed by the installation-file record in this section. No verifiable binding has been established between the screenshots or video and that installation file.

### 26.2 iOS 2.5 Series

The official distribution channel, App Store information, and application metadata from a connected device have been verified. The sample that can be verified in this review is App Store version 2.5.1, build 18; its App Store ID is 6759948234. This document uses iOS 2.5 Series as the product-scope name while retaining the precise version in the sample record.

The verification above confirms distribution and version identity; the available evidence is not yet sufficient to support a final conclusion on package-level security review or complete physical-device security testing. Android runtime screenshots and video are not treated as iOS test evidence.

### 26.3 Evidence Scope and Public Materials

Runtime interfaces, service-access records, and speed-testing materials can support observations about visible functionality and operating state at the time, but they cannot by themselves prove protection against privacy leaks, protection during abnormal connection conditions, a no-logs policy, or the absence of security vulnerabilities. Historical conclusions in the existing annual report remain limited to the scope of their respective versions.

Public materials provide only sample identity, file verification values, the review scope, and conclusions. Account, device, subscription, and traffic information shown in the original screenshots, together with internal technical details, remains in the restricted archive. This supplement does not include a new digital signature; signatures on earlier reports verify only those earlier report files.

[Download this public supplement](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-Supplement-2026-09-11-en.md). [Download the six-language file checksum manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-Supplement-2026-09-11.sha256). The checksum manifest is provided for file-integrity verification.

### 26.4 Added-Record Timeline

- 2026-09-11: Completed identity, integrity, and signature verification for the Android 2.5.8 installation file and recorded the scope of the partial static review.
- 2026-09-11: Reviewed the public Android 2.5 series runtime video and eight submitted screenshots, recording their version attribution and privacy-protection boundaries.
- 2026-09-11: Completed verification of the official iOS 2.5 series distribution channel and installed-version metadata, and added this public supplement.

This update adds Section 26 only; the original publication date, earlier body text, historical evidence, file verification values, signatures, and article URL remain unchanged. Each language edition is a translation of the same supplement.