XChat launches standalone iOS app as security concerns remain

2026-04-27

X shipped a dedicated XChat iOS app marketed as end-to-end encrypted, but Mysk's traffic analysis found that all Juicebox protocol "realms" hosted under x.com domains lacked certificate pinning, allowing X to reconstruct private keys protected only by a four-digit PIN.