Lcl paiement mobile

Omerr666

Hello
Is anyone could use LCL paiement mobile (french banking app to pay with NFC).
I encounter this issue.

type: crash
osVersion: google/husky/husky:16/BP4A.251205.006/2025121201:user/release-keys
package: fr.lcl.android.payment:20100, targetSdk 35
process: fr.lcl.android.payment
installer: com.aurora.store

signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000000

backtrace:
      #00 pc 0000000000000000  <unknown>

Novalissoide

Omerr666 try disable Memory tag protection for the app. And install via Sandboxed G Play.

de0u

Omerr666
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000000

backtrace:
#00 pc 0000000000000000 <unknown>

That's exciting! The app tried to execute code at 0, which isn't going to work. If I were to speculate, maybe the app tried to load some code dynamically, didn't notice that it couldn't, and went ahead and jumped into the void.

Personally I'm not sure I'd want to trust money to an app with that kind of code quality.

Omerr666

Thanks for the answer, but same issue with gapps ans memorry tagging disabled :(

type: crash
osVersion: google/husky/husky:16/BP4A.251205.006/2025121201:user/release-keys
package: fr.lcl.android.payment:20100, targetSdk 35
process: fr.lcl.android.payment
installer: com.android.vending

signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000000 (read)

backtrace:
      #00 pc 0000000000000000  <unknown>

Novalissoide

Omerr666 Try entire exploit protection compatibility mode, and restart

Eirikr70

Omerr666 Try all the usual tricks

exploit protection mode,
DCL via memory,
DCL via storage,
...

Novalissoide

Omerr666 could not find it in the
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

Is this the page, or did I use a wrong/outdated one?

nandohyphen1

Novalissoide Is this the page, or did I use a wrong/

No, that's the one

Omerr666

I did not find too. But the first time i used the app, it worked well. But now application will closed automatically...

I tried with the usual tricks but same issue :(

Thanks for jour help.

Novalissoide

Omerr666 a few other things that might be scary for bank apps;

Developer options enabled
Having a private space
App installed in secondary user
Not having Play Services installed
Using a less common keyboard app

Omerr666

I have disabled developper options, no multiple profile, play services installed, no keybord app installed...

Novalissoide

Omerr666 Try logging in just through Vanadium, on the classic webpage of the bank.

Novalissoide

Further things that may scare some bank apps, if they detect it.
Having no sim
System time out of sync
Screen sharing detected
Very short system uptime
More than one profile running
Vpn detected
Adb usage
Proxy usage

Not granting Google Play Services access to phone

Omerr666

Unfortunately it's only a mobile app, cause only used to pay by NFS!

NetRunner88

Change bank lol, go with cic/crédit mutuel
At least they know how to use hardware attestation..
And their nfc paiement option work great.

nosnahc

Now with a new update from LCL I can launch the app but got an error like "your phone doesn't get the security requierement"