AI disclosure: AI instruments have been used to help with components of the code, documentation and graphics of this merchandise; the writer reviewed and examined all of it.
Not affiliated: Firebase and Google Play, the App Retailer, WalletConnect, Jupiter, 0x, 1inch, Alchemy, Helius and the Etherscan-family explorers are named solely to explain what this merchandise integrates with. The names and marks belong to their house owners, this isn’t an official product of any of them, and every service wants your personal account underneath that supplier’s personal phrases.
SuperWallet is full Flutter supply code for launching your personal non-custodial crypto pockets: a multi-chain pockets app for iOS, Android, the online and macOS, a Flutter net admin panel and a Firebase backend with 28 Cloud Capabilities. Your customers maintain their keys on their very own gadgets. You set the model, the chains, the swap charge (free to 2% on 0x, 1inch and Jupiter quotes) and the PRO value from the admin panel. The charge ships off and the bundle incorporates no keys. AI disclosure: AI instruments have been used to help with components of the code, documentation and graphics of this merchandise; the writer reviewed and examined all of it.
Reside demo
| App | Hyperlink | Entry |
|---|---|---|
| Pockets app (net construct) | project-3c5ee.web.app | Create a demo pockets within the browser |
| Admin panel | super-wallet-admin-demo.web.app | Press “Open Consumer Demo Workspace” — modifications keep in your browser |
| Documentation | superwallet-docs.mikodes.com | Public, open with out signing in |
Demo directions
Every part beneath is open to anybody – nothing to request and nothing to put in.
- Pockets demo – e-mail and password: none – the pockets has no accounts. Open project-3c5ee.net.app and create a demo pockets within the browser; it stays in that browser and holds no funds.
- Admin panel – e-mail and password: none wanted: open super-wallet-admin-demo.net.app and press ‘Open Consumer Demo Workspace’. The printed demo account [email protected] / Wq5JpJI1cYoOWmmF opens the identical workspace, which is browser-local and by no means writes to the database.
- Documentation – sign-in: none. superwallet-docs.mikodes.com is public.
- What the demo can’t present: push notifications, retailer purchases and the Android and iOS builds. These want your personal Firebase undertaking and your personal retailer accounts.
Third-party providers and prices (not included within the value)
This merchandise is supply code. It runs on exterior providers that you just open and pay for by yourself accounts; they’re billed by their suppliers and should not included within the merchandise value.
- Firebase (Google): Blaze pay-as-you-go plan required for Cloud Capabilities – utilization paid by you
- Internet hosting and area for the online pockets and admin panel – paid by you
- RPC and block-explorer suppliers: Alchemy (EVM), Helius (Solana) and the Etherscan-family explorer APIs – free tiers have price limits, manufacturing visitors often wants a paid plan – paid by you
- Market and token information: CoinGecko (a free demo key has price limits; manufacturing use often wants a paid CoinGecko plan), Birdeye (Solana costs), Moralis and Covalent (balances and historical past, optionally available) – supplier plans paid by you
- 0x and/or 1inch swap API keys – supplier plans paid by you
- Reown (WalletConnect) undertaking ID – free tier, paid plans by Reown
- Transak, MoonPay or Ramp card on-ramp (optionally available) – accomplice onboarding; supplier charges charged to finish customers
- Apple Developer Program and Google Play Console – developer charges paid by you; retailer fee on PRO subscriptions
- Blockchain community charges – paid by finish customers
Each service above is billed by its personal supplier, to your personal account. A number of have free tiers; you’re accountable for any utilization past them, together with API prices for 0x, 1inch, Jupiter, Alchemy, CoinGecko, Reown and Firebase. Verify every supplier’s present pricing earlier than you launch. None of it’s included within the value of this merchandise.
Options
- Non-custodial multi-chain pockets: 25+ EVM networks plus Bitcoin, Solana, Tron and Sui; seed phrases and keys are created and encrypted on the gadget and by no means despatched wherever
- Swaps via 0x and 1inch (EVM) and Jupiter (Solana) with an operator charge from free to 2% (200 bps cap within the admin, the app and the backend), proven within the quote earlier than the person confirms and paid on-chain to your personal charge wallets
- PRO subscription via App Retailer and Google Play within the retailer apps, and an on-chain crypto fee verified by a Cloud Operate within the net construct and self-distributed macOS builds; weekly value and optionally available free trial set within the admin
- Flutter net admin panel: overview, income, customers, branding with a stay cellphone preview, monetization, zero-fee and promo-banner campaigns, compliance, chains, tokens, NFT collections, dApps, system and swap config, push notifications, analytics, distant config, exercise log, roles with two-factor sign-in, safety and publish config
- WalletConnect v2 (Reown), a dApp browser and a Uncover display screen
- Net pockets protected by a vault passphrase (PBKDF2-HMAC-SHA256, 600,000 iterations, AES-256-GCM); revealing the phrase and each signing ask for it once more; strict Content material-Safety-Coverage
- Authentication earlier than each transaction: one test in entrance of each ship, swap, NFT switch, WalletConnect transaction, speed-up and cancel on all chains (vault passphrase on the internet; gadget authentication on iOS and Android from $50, for unpriced transfers, or all the time when the person turns it on)
- Firebase backend: Authentication, Firestore guidelines, Distant Config template, Cloud Messaging and 28 Cloud Capabilities in TypeScript on Node.js 22
- Examined: 1,247 pockets exams, 64 admin exams and 66 backend exams; flutter analyze reviews no errors and no warnings
The previews, the quilt and the outline photos are actual captures of the demo builds with pattern information. They’re presentation materials, not a part of the obtain, and no determine in them is a outcome or a forecast.
Good to know
- Retailer PRO: a subscription unlocks PRO just for the account that purchased it. Restoring it on a brand new gadget sends a switch request you approve within the admin; the server re-checks it with Apple or Google and strikes it, so it’s by no means energetic on two accounts.
- First admin: there isn’t any default login. The primary admin is created throughout set up with a one-time setup token or your proprietor account.
- Portfolio Insights: the PRO well being rating, focus, danger and rebalancing alerts are computed on the gadget from the person’s holdings, with no exterior service and no API key. A part of each PRO membership, the free trial included.
- macOS: signal launch builds with your personal Apple certificates; Firebase sign-in on macOS wants the Keychain Sharing functionality together with your workforce. The crypto PRO fee seems solely in macOS builds you distribute your self (DIRECT_DISTRIBUTION=true), by no means in a Mac App Retailer construct. There isn’t a Home windows or Linux model.
FAQ
Do I must know Flutter?
Primary Flutter and Firebase expertise are sufficient. The documentation walks via each command, from Firebase setup to retailer launch.
Is it custodial?
No. Seed phrases and personal keys are created and saved on the person’s personal gadget and are by no means despatched to Firebase or to you. On iOS and Android they sit within the Keychain and the Android Keystore. In a browser there isn’t any keystore, so the person units a vault passphrase: it derives the encryption key and is rarely saved wherever, which additionally means a misplaced passphrase can solely be recovered from the written restoration phrase.
How are keys protected within the net pockets?
The person units a vault passphrase earlier than a pockets might be created or imported in a browser. PBKDF2-HMAC-SHA256 at 600,000 iterations derives the important thing materials via the browser’s Net Crypto: half encrypts the vault’s personal AES-256 key earlier than it’s saved, half is the wrapKey for flutter_secure_storage so the important thing it retains is wrapped somewhat than exportable. Solely a salt, an IV and a verifier are endured. Revealing the restoration phrase, and each signing — a ship, a swap or a WalletConnect request, regardless of the quantity — ask for the passphrase once more.
How does the swap charge work?
You set a charge from 0 to 2% and your charge wallets in Admin > Monetization. It’s added to 0x and 1inch quotes on EVM chains (paid to your EVM pockets) and to Jupiter quotes on Solana (paid to your Solana pockets’s token account for the token the person receives; if that token account doesn’t exist, that swap runs with out a charge). Different routes (Uniswap V2-style routers, Tron, Sui) carry no charge. The charge is off till you set it. What you earn will depend on your customers and their quantity.
How do customers pay for PRO?
Within the iOS and Android builds, via App Retailer and Google Play subscriptions with your personal retailer merchandise — promoting a digital subscription exterior in-app buy breaks Apple’s guideline 3.1.1 and Google Play’s funds coverage, so the crypto choice will not be provided there. Within the net construct, and in builds you distribute your self, a person pays on-chain as a substitute: a Cloud Operate reads the transaction, checks the recipient, the confirmations, the token’s personal decimals and the quantity towards the present value of the plan chosen (the operator units a weekly value and, optionally, month-to-month and annual costs; nothing is derived from the weekly value), requires a signature from the paying pockets, and lets one transaction activate precisely one account.
Which license do I want?
Each licences embrace the whole supply code and each characteristic of this merchandise. Nothing is held again, restricted or unlocked by licence tier. The distinction is in how the tip product could also be used: a Common License covers one finish product whose finish customers should not charged, and an Prolonged License covers one the place they’re (for instance PRO subscriptions or a swap charge). Envato’s licence phrases are the authority.
What will not be included?
Internet hosting, your Firebase undertaking, developer accounts, third-party API keys, community charges and set up in your accounts. Exterior paid providers are billed individually by their suppliers and should not included within the merchandise value.
What does help cowl?
Six months of merchandise help are included with the acquisition (Envato commonplace) and might be prolonged on CodeCanyon. Assist runs via the Assist tab on this web page and covers questions concerning the merchandise and bugs in it, not set up, internet hosting or customized improvement.
Declarations
- AI instruments: AI instruments have been used to help with components of the code, documentation and graphics of this merchandise. AI coding assistants have been used on the Flutter pockets, the admin panel, the Cloud Capabilities, the documentation and the preview graphics, underneath the writer’s path and evaluation. Each file was learn and examined by the writer earlier than launch: flutter take a look at runs 1,247 exams within the pockets and 64 within the admin panel, flutter analyze reviews no errors and no warnings, the Cloud Capabilities type-check cleanly and go their 66 exams, and npm audit reviews no identified vulnerabilities of their dependencies. No a part of the merchandise is third-party or AI-sourced code of unknown origin; the dependencies are the general public packages listed in pubspec.yaml, the bundle.json recordsdata and licenses/THIRD-PARTY-LICENSES.md.
- Not affiliated: Firebase and Google Play, the App Retailer, WalletConnect, Jupiter, 0x, 1inch, Alchemy, Helius and the Etherscan-family explorers are named solely to explain what this merchandise integrates with. The names and marks belong to their house owners, this isn’t an official product of any of them, and every service wants your personal account underneath that supplier’s personal phrases.
- Non-custodial, and crypto danger: the pockets is non-custodial: keys are generated on the gadget, encrypted there and by no means transmitted, so neither the writer nor the operator can get better a restoration phrase or reverse a transaction. Crypto property can lose worth and a swap can fail or fill at a worse value. This merchandise is software program, not monetary recommendation, and it guarantees no return.
- Preview materials: the screenshots, the quilt and the preview photos are actual captures of this merchandise working, composed by the writer’s personal construct scripts. They’re presentation materials, not a part of the obtain, and no determine in them is a outcome or a forecast.
Necessities
- Flutter 3.41.3+ with Dart 3.11.1+ (each pubspecs: flutter >=3.41.3)
- Node.js 22 LTS + Firebase CLI 13+ + FlutterFire CLI
- Firebase undertaking on the Blaze plan
- Xcode 26 or newer and CocoaPods 1.14+ (iOS 15.5+)
- Android Studio 2024.3.1+ with Android SDK Platform 36 and JDK 17
Changelog
v1.1.0 (2026-11)
- Net pockets protected by a person passphrase (PBKDF2 600k + AES-256-GCM, wrapKey for safe storage).
- On net, revealing the phrase and each signing ask for it.
- Content material-Safety-Coverage not permits inline scripts, inline types, eval or scripts from arbitrary origins.
- Crypto PRO funds verified server-side by a Cloud Operate (payer signature, recipient, confirmations, on-chain token decimals, stay value, a separate EUR value per plan, one transaction per account) and faraway from the iOS and Android builds.
- No Apple workforce ID within the undertaking.
- TargetSdk declared explicitly as 36.
- Swap charge off by default and capped at 2%.
- Solana charge through Jupiter to your token account.
- Stripe checkout, the bridge charge setting and the referral programme eliminated.
- Each transaction (sends, swaps, NFT transfers, WalletConnect transactions, speed-up and cancel, on each chain) passes one authentication test earlier than it’s signed, together with Token element Ship, Settings Solana and NFT ship.
- Portfolio Insights (PRO) is computed on the gadget from the person’s holdings, and the server-side portfolio operate and its API key secret have been eliminated.
- The primary admin wants a one-time setup token (ADMIN_SETUP_TOKEN) or the proprietor account.
- App textual content lives within the English localization file.
- Inter is bundled within the pockets and the admin (SIL OFL 1.1).
- The free PRO trial follows the admin’s Trial Days setting (no trial by default).
- Retailer subscriptions are certain to the shopping for account (appAccountToken / obfuscatedAccountId, verified with Apple and Google.
- A replay on one other account writes nothing).
- A restore on a brand new gadget recordsdata a switch request the operator approves (re-checked with the shop, by no means energetic on two accounts).
- Retailer subscribers rely as PRO within the admin and set off the new-PRO webhook.
- The paywall exhibits the shop’s localized value.
- Sandbox purchases want APP_STORE_ALLOW_SANDBOX.
- The app clears an area PRO when the server reviews none.
- MacOS presents the crypto fee solely in self-distributed builds.
- Eliminated admin instruments that had no pockets or server aspect: promo codes, A/B flags, the announcement-banner record and its A/B take a look at, the PRO Trial and Bonus Factors marketing campaign sorts, per-feature PRO switches, price limits and further webhooks.
- The admin demo workspace begins empty.
- IOS compiles its asset catalog and storyboards usually, so a brand new app icon is picked up.
- MacOS retains wallets within the login keychain.
- The untested Home windows and Linux folders have been eliminated.
- Each apps require Flutter 3.41.3 (Dart 3.11.1).
- Cloud Capabilities dependencies up to date, npm audit reviews 0 vulnerabilities.
v1.0.0 (2026-09)
- Preliminary launch.
