Wallet Logo

Korvio Wallet - Multichain Blo

Latest release: 1.0.25 ( 18th March 2021 ) 🔍 Last analysed 14th March 2022 . Custodial: The provider holds the keys Not updated in a while
10 thousand
21st June 2019

Jump to verdict 

Do your own research!

Try out searching for "lost bitcoins", "stole my money" or "scammers" together with the wallet's name, even if you think the wallet is generally trustworthy. For all the bigger wallets you will find accusations. Make sure you understand why they were made and if you are comfortable with the provider's reaction.

If you find something we should include, you can create an issue or edit this analysis yourself and create a merge request for your changes.

The Analysis 

Described in its Google Play, it claims that it is a ‘Multichain Blockchain Technology’ and that it allows users to:

sell or exchange your coin without restriction after the initial holding period.

The language on its Play description is full of seemingly unrelated complex terminologies. An example of which reads:

The purpose of multichains is to enable the decentralized aggregation, ordering, time stamping and archiving of any type of information, including structured data, correspondence or documentation.

Its website strives to describe their service more:

KORVIO can Issue millions of assets on a blockchain, which all tracked and verified at the network level. Perform safe multi-asset and multi-party atomic exchange transactions.

We then took a look at the Korvio Terms and Conditions

We may terminate or suspend access to our Service immediately, without prior notice or liability, for any reason whatsoever, including without limitation if you breach the Terms.

App Installation

We downloaded the app and registered with an email address. After that, the KRO/BTC wallet is easily accessible. The app claims that users can receive both KRO and BTC using the same address. There is an option to backup the wallet via a 12 word mnemonic. It is possible to swap KRO with BTC using the platform.

KRO Token

The KRO token is the primary token used in the app. Described in Korvio’s FAQ:

KRO is world first cryptocurrency function with AI integrated DAPP. The immutable ledger technology helps to accounts for one end solution to the number of running applications by which trade fund or users money can be tracked.

Google Play Reviews

dhruv dogra
★★☆☆☆ May 11, 2021
Swapping kro to btc is a real problem.Kro is getting debited to some other auto generated id, but in turn bitcoin is not getting credited. This is big isssue which has to be resolved. Otherwise this app is working only on cash transactions. There is no way to convert it elsewhere.

SAHIL CHAUDHARY
★☆☆☆☆ May 8, 2021
Bitcoin lost. !!!!!! I have using this app for quite long and i did’t face any issue. But today i tried to swipe KRO to bitcoin, transaction was successful but it didn’t reflect into mine bitcoin wallet in same app. By default it took something random address.

Verdict

The language on its Google Play gives one pause for its “marketing” approach where it described its app as:

“a lifetime opportunity, revolutionizing the digital business world of today’s economy. The Korvio Reward Program is born on the success of the pioneering cryptocoin, Bitcoin!”

Initially, we thought of it as a DeFi app of sorts, but upon looking at the terms and the reviews, it may appear more like a custodial service. Although it is possible to backup the wallet using a 12 word mnemonic, not much information apart from the Terms and Conditions is available. Incidentally, clicking on the Contact Us link on one of its pages, leads back to the main page.

We contacted their support via support@korvio.io, and await their response.

Update on Contact

Delivery incomplete
There was a temporary problem delivering your message to support@korvio.io. Gmail will retry for 21 more hours. You’ll be notified if the delivery fails permanently.

The response was:
The recipient server did not accept our requests to connect. Learn more at https://support.google.com/mail/answer/7720 [korvio.io 2606:4700:3030::ac43:de35: timed out] [korvio.io 2606:4700:3030::6815:360e: timed out] [korvio.io 104.21.54.14: timed out] [korvio.io 172.67.222.53: timed out]

Tentatively, we would be giving this a verdict of custodial and not verifiable until further information is made available.

(dg)

Verdict Explained

As the provider of this product holds the keys, verifiability of the product is not relevant to the security of the funds!

As part of our Methodology, we ask:

Custodial!

Is the product self-custodial?

If the answer is "no", we mark it as "Custodial: The provider holds the keys".

A custodial service is a service where the funds are held by a third party like the provider. The custodial service can at any point steal all the funds of all the users at their discretion. Our investigations stop there.

Some services might claim their setup is super secure, that they don’t actually have access to the funds, or that the access is shared between multiple parties. For our evaluation of it being a wallet, these details are irrelevant. They might be a trustworthy Bitcoin bank and they might be a better fit for certain users than being your own bank but our investigation still stops there as we are only interested in wallets.

Products that claim to be non-custodial but feature custodial accounts without very clearly marking those as custodial are also considered “custodial” as a whole to avoid misguiding users that follow our assessment.

This verdict means that the provider might or might not publish source code and maybe it is even possible to reproduce the build from the source code but as it is custodial, the provider already has control over the funds, so it is not a wallet where you would be in exclusive control of your funds.

We have to acknowledge that a huge majority of Bitcoiners are currently using custodial Bitcoin banks. If you do, please:

  • Do your own research if the provider is trust-worthy!
  • Check if you know at least enough about them so you can sue them when you have to!
  • Check if the provider is under a jurisdiction that will allow them to release your funds when you need them?
  • Check if the provider is taking security measures proportional to the amount of funds secured? If they have a million users and don’t use cold storage, that hot wallet is a million times more valuable for hackers to attack. A million times more effort will be taken by hackers to infiltrate their security systems.

But we also ask:

Stale!

Was the product updated during the last year?

If the answer is "no", we mark it as "Not updated in a while".

Bitcoin wallets are complex products and Bitcoin is a new, advancing technolgy. Projects that don’t get updated in a year are probably not well maintained.

This verdict may not get applied if the provider is active and expresses good reasons for not updating the product.

The product cannot be independently verified. If the provider puts your funds at risk on purpose or by accident, you will probably not know about the issue before people start losing money. If the provider is more criminally inclined he might have collected all the backups of all the wallets, ready to be emptied at the press of a button. The product might have a formidable track record but out of distress or change in management turns out to be evil from some point on, with nobody outside ever knowing before it is too late.