Sign in to claim your voucher

Bridge exploitation probes

Static analysis (DLA-024) found three bridge modules that run for any host with no authorization check: Navigator, NavigationBar, Loading. Every other module first checks the page host against bybit.com/kz/georgia. Derived from code; device confirmation pending. Nothing is sent anywhere.

No host check — app chrome control

• NavigationBar · setTitlecallHandler('NavigationBar', {methodName:'setTitle', params:{title:'Bybit · Security Center'}})
• NavigationBar · hidemethodName:'hide' — removes the only bar the user has
• NavigationBar · showmethodName:'show'
• Loading · shownative loading overlay over the page
• Loading · hidemethodName:'hide'

No host check — page control

• Navigator · reloadmethodName:'reload'
• Navigator · gobackmethodName:'goback' — leaves the page
• Navigator · closePagemethodName:'closePage' — closes the webview

Host-checked (contrast)

• Router · openexpect dropped: this host fails isAuthorizedHost
• UserProfile · getexpect dropped: same host check