u/No-Hospital5028

A security researcher demonstrated how the EU age verification app can be bypassed in under 2 minutes by modifying local files, including resetting PIN attempts and disabling biometric checks.

The demo is shown here: https://xcancel.com/Paul\_Reviews

The app is an open-source reference implementation published by the and is still under development, not a finished product.

Still, it highlights how weak local protections can compromise sensitive identity systems.

repo: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui