StealthLedger

Verify this build

This page fetches every JavaScript and CSS asset that stealthledger.io is serving right now, hashes each one in your browser, and compares the result against the signed release manifest. If any file has been modified between the audited source and the copy your browser is loading, you will see it flagged red below.

View raw manifest

How to trust this check

The verification runs in your browser, so it can only prove that the assets on this domain match the manifest that this domain serves. Two extra checks harden that:

  1. Open /releases.txt and find the line for the shell version shown in the summary above. The manifestSelfHash on that line must match the value in the summary. Same domain, different file and cache path, so a partial tamper of either file is detectable.
  2. Open the integrity release on GitHub (crypto-core). The manifestSelfHash listed there for the current shell version must match the value in the summary. That value is published on a repository this domain does not control, so a full compromise of the hosting infrastructure alone cannot fake it.

The full cryptographic core — the same vault-core.js your browser runs, plus its iOS counterpart — is now published on GitHub at github.com/stealthledger-io/crypto-core for independent audit. Compare the module hash above against the file in that repository to confirm the bytes encrypting your vault are the ones published for review. Per-release signatures are still on the roadmap; until those land, saving the self hash on your first visit and confirming it only changes when a new shell version does is a useful extra check.