Skip to content
  • Tech Dev NotesTech Dev Notes
Apps
  • Lookup
  • Compare
Market movement
  • Charts
  • Rankings
Visual proof
  • Screens
  • Store listings
  • Icons
Stacks and releases
  • Tech stacks
  • Tool releases
  • Developers
More
  • X feature flags
  • Grokipedia
  • Grok companions
  • Blog
  • Follow on X
ChartsRankingsMoversCompareLookupScreensTech stacksReleases

© 2026 Tech Dev Notes

RSSAboutAPIStatusSecurityPrivacyTermsSitemap@techdevnotes

Build stack

SoFi: Bank, Investing & Crypto Android tech stack

Flutter Android banking app with native TensorFlow Lite, OpenCV, Rive, hybrid Kotlin UI, and 36 SDKs including Plaid and Stripe

v3.99.0 · latest

Languages

4

Flutter / Dart · Java · Kotlin

Third-party SDKs

36

16 categories

Permissions

26

18 native libs

Signals

87

capabilities, APIs, fonts

Analyzed June 19, 2026·Bundle com.sofi.mobile·Detection observed
Built withFlutter / Dart9Java146JJetpack Compose117BBranch53Firebase Analytics118Google App Measurement94Google Mobile Ads (AdMob)101Datadog28CCrashlytics6PPlaid6SStripe17AAuth013
SectionsRuntimeSDKsAndroid buildSignals

Analysis

What the stack reveals

An automated read of the signals detected on this page - each point links to the evidence below.

Flutter with native Android interop

Architecture

Primary runtime is Flutter via libflutter.so and libapp.so, combined with Kotlin, Java, and Jetpack Compose indicating hybrid app architecture.

libflutter.so · libapp.so · Flutter / Dart · Kotlin · +1

Runtime↓

Bundled TensorFlow Lite and OpenCV

On-device ML

Native libraries libtensorflowlite_jni.so and libopencv_java4.so are shipped for on-device machine learning and image processing.

libtensorflowlite_jni.so · libopencv_java4.so · TensorFlow Lite · OpenCV

Keystore, biometrics and anti-tampering

Security

Uses Android Keystore, biometric auth, FLAG_SECURE to prevent screenshots, and queries other apps for fake location spoofers.

Android Keystore · Biometric auth · FLAG_SECURE · queries_other_apps

Signals↓

Rive native animations

Interface

Includes librive_native.so for Rive vector animations alongside Jetpack Compose and Material Components.

librive_native.so · Rive · Jetpack Compose

Frameworks↓

36 third-party SDKs for finance

Dependencies

Integrates SDKs for payments (Plaid, Stripe), messaging (Braze), analytics (Branch, Firebase), and crash reporting (Datadog).

36 third_party_sdks · Plaid · Stripe · Braze · +1

SDKs↓

Tracking declared with multiple providers

Privacy

Declares tracking and references domains from Branch, Braze, Google, and Firebase for analytics and attribution.

declares_tracking · Branch · Braze · Firebase Analytics

Signals↓

Build

Build & platform

Android SDK levels, supported ABIs, and signing scheme from the Android app.

Min SDK

26

Target SDK

36

ABIs

1

arm64-v8a

Signing

v2 · v3

Common Name: Android Engineer

Manifest

App components

Activities, services, broadcast receivers, and content providers declared in the manifest.

Activities

70

Services

23

Receivers

20

Providers

11

Exported (12)

activity:com.auth0.android.provider.RedirectActivityactivity:com.plaid.internal.LinkRedirectActivityactivity:com.sofi.mobile.MainActivityactivity:com.stripe.android.financialconnections.lite.FinancialConnectionsSheetLiteRedirectActivityactivity:com.stripe.android.link.LinkRedirectHandlerActivityactivity:com.stripe.android.payments.StripeBrowserProxyReturnActivityreceiver:androidx.profileinstaller.ProfileInstallReceiverreceiver:androidx.work.impl.diagnostics.DiagnosticsReceiverreceiver:com.google.firebase.iid.FirebaseInstanceIdReceiverreceiver:io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiverservice:androidx.work.impl.background.systemjob.SystemJobServiceservice:com.google.android.gms.auth.api.signin.RevocationBoundService

Manifest

Permissions

26 permissions requested in the manifest.
android.permission.ACCESS_ADSERVICES_AD_IDandroid.permission.ACCESS_ADSERVICES_ATTRIBUTIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.CAMERAandroid.permission.CHANGE_NETWORK_STATEandroid.permission.DETECT_SCREEN_RECORDINGandroid.permission.FOREGROUND_SERVICEandroid.permission.INTERNETandroid.permission.MODIFY_AUDIO_SETTINGSandroid.permission.POST_NOTIFICATIONSandroid.permission.READ_CONTACTSandroid.permission.READ_EXTERNAL_STORAGEandroid.permission.READ_PHONE_STATEandroid.permission.RECORD_AUDIOandroid.permission.USE_BIOMETRICandroid.permission.USE_FINGERPRINTandroid.permission.VIBRATEandroid.permission.WAKE_LOCK

Native

Native libraries

Bundled native (.so) libraries - NDK code and cross-platform runtimes.
libandroidx.graphics.path.solibapp.solibBarcodeScannerLib.solibc++_shared.solibcontours-lib.solibdatadog-native-lib.solibdatastore_shared_counter.solibflutter.solibimage_processing_util_jni.solibMobileProtect.solibopencv_java4.solibpairipcore.solibrive_native.solibsurface_util_jni.solibtensorflowlite_jni.solibTMXProfiling-8.0-88-jni.solibWrapperAutoCaptureJni.solibWrapperBarcodeDetectorJni.so

API

API surface

Endpoints, base URLs, and URI schemes recovered from the DEX string pool (Retrofit detected).

Base URLs

http://sofi.comhttp://SoFi.com/legalhttp://www.sofi.com/atrributionCookie`http://www.sofi.com/offer-gatekeeper/api/open/v1/rsvp/https://cms.soficdn.net/git/images/pacific/illustrations/v2/big/illustration-cashback.pnghttps://cms.soficdn.net/git/svgs/invest/company-logos/crypto/USDC.svghttps://design.soficdn.net/animations/https://design.soficdn.net/glyphs/glyph-sofijewel-24.svgDhttps://design.soficdn.net/illustrations/https://design.soficdn.net/illustrations/illustration-addfunds-180.pnghttps://design.soficdn.net/illustrations/illustration-addfunds-390.pnghttps://design.soficdn.net/illustrations/illustration-closeaccount-390.png

API endpoints

/account//account/00000000-0000-0000-0000-000000000001/hl/account/100005/activity/account/100005/transactions/account/10c1d5ca-64d4-45ec-a5c3-8eb45c0acc4d/pl/account/34af228e-36d5-47b3-9e70-7aef8a6ecbdf/pl/account/496b2687-f7be-4b3a-9b5b-45c3a712e85f/pl/account/account_balance.buildable.dart/account/account_balance.buildable.freezed.dart/account/account_balance.buildable.g.dart/account/account_identifier.buildable.dart/account/account_identifier.buildable.freezed.dart/account/account_identifier.buildable.g.dart/account/account_limit.buildable.dart/account/account_limit.buildable.freezed.dart/account/account_limit.buildable.g.dart/account/account_type.buildable.dart/account/atm/account/benefits//account/c7d10cd9-6d3d-4c06-a829-0011455a9dfc/pl

URI schemes

alipayandroid-appandroid-keystoreandroid.resourceassetassetsconsentdirectgmsgintentmarketodaplaidlinkrawresourcertprtspstripestripejsstripesdkworkspec

Signals

Capability & security signals

Behaviors inferred from DEX type descriptors - WebView bridges, dynamic code loading, reflection, crypto, keystore, and more.
Android KeystoreBiometric authClassLoader useDynamic code loading (DexClassLoader)Play Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Security

Potential secrets detected

String patterns matching credentials/keys found by static scanning. Counts only - values are never published.
google api key: 1

Build

Build & platform

Compiler, target OS, supported device families, and localization footprint detected from the bundle.

Devices

Android

Runtime

Languages & runtimes

Primary runtimes and language signatures used by the app.
C/C++ (native)
142
Flutter / Dart
9
Java
146
Kotlin
143

Dependencies

Third-party SDKs

Grouped by purpose. Select any SDK to see other tracked apps that use it; open the ↗ link for its source.
36 of 36 SDKs
SDKCategoryVendorVersionAppsSource
BranchDeep linking and mobile attribution.AnalyticsBranch-53
Firebase AnalyticsApp usage and event analytics from Firebase.AnalyticsGoogle-118
Google App MeasurementGoogle Analytics for Firebase event measurement substrate.AnalyticsGoogle-94
Google Mobile Ads (AdMob)AdMob mobile advertising for Android.AdsGoogle-101
DatadogReal User Monitoring, logs, and observability.Crash & PerformanceDatadog-28
DatadogReal User Monitoring, logs, and observability.Crash & PerformanceDatadog-6
CrashlyticsReal-time crash reporting from Firebase.Crash & PerformanceGoogle-78
PlaidBank account linking and financial data.PaymentsPlaid-6
StripePayments and financial infrastructure SDK.PaymentsStripe-17
Auth0Authentication and identity platform.AuthenticationOkta-13
Firebase AuthAuthentication--16
Google Sign-InGoogle account authentication for Android.AuthenticationGoogle-140
KtorKotlin asynchronous HTTP client/server framework.NetworkingJetBrains-33
OkHttpHTTP client for Android and Kotlin/Java.NetworkingSquare-125
RetrofitType-safe HTTP client for Android/Java.NetworkingSquare-92
BrazeCustomer engagement and lifecycle messaging.MessagingBraze-33
Firebase Cloud MessagingPush notifications via Firebase Cloud Messaging.MessagingGoogle-131
Google LocationFused location / geofencing services.MapsGoogle-106
Google MapsGoogle Maps SDK for mapping, places, and geocoding.MapsGoogle-87
Media3 (ExoPlayer)Media playback (ExoPlayer) for Android.MediaGoogle-88
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-64
OOpenCVOn-device ML / AI--4
TensorFlowMachine-learning runtime and libraries.On-device ML / AIGoogle-21
TensorFlow LiteOn-device machine-learning inference runtime.On-device ML / AIGoogle-18
Kotlin CoroutinesAsynchronous/concurrent programming for Kotlin.Reactive / AsyncJetBrains-131
DataStoreTyped key-value / proto data storage (Jetpack).StorageGoogle-90
OkioI/O and buffering library for Kotlin/Java.StorageSquare-86
RoomSQLite object-mapping persistence (Jetpack).StorageGoogle-129
FirebaseGoogle's app platform (auth, Firestore, messaging, analytics, crash reporting).FirebaseGoogle-160
Google DataTransportFirebase/Google transport runtime for telemetry and event delivery.FirebaseGoogle-143
Google Play servicesGoogle's core mobile services platform.FirebaseGoogle-143
Jetpack ComposeAndroid's declarative UI toolkit.RenderingGoogle-117
Material ComponentsMaterial Design UI components for Android.RenderingGoogle-138
RRiveRendering--5
Play IntegrityApp/device integrity and anti-abuse attestation API for Android.Anti-FraudGoogle-51
Firebase Remote ConfigFeature Flags--63
36 SDK rows

Interface

UI & graphics

Frameworks and libraries SoFi: Bank, Investing & Crypto uses to render its interface and animations.
Jetpack ComposeMaterial ComponentsRive

Assets

Bundled fonts

Custom font families packaged in the app bundle.
arimoCupertinoIconscursivefontawesome-webfontJetBrainsMono-RegularKaTeX_AMS-RegularKaTeX_Caligraphic-BoldKaTeX_Caligraphic-RegularKaTeX_Fraktur-BoldKaTeX_Fraktur-RegularKaTeX_Main-BoldKaTeX_Main-BoldItalicKaTeX_Main-ItalicKaTeX_Main-RegularKaTeX_Math-BoldItalicKaTeX_Math-ItalicKaTeX_SansSerif-BoldKaTeX_SansSerif-ItalicKaTeX_SansSerif-RegularKaTeX_Script-RegularKaTeX_Size1-RegularKaTeX_Size2-RegularKaTeX_Size3-RegularKaTeX_Size4-RegularKaTeX_Typewriter-RegularMaterialIcons-Regularplaid_cernplaid_cern_extrabold

Packaging

Build & packaging

Dependency managers and build tooling detected in the app bundle.
Gradle (inferred)

Integrations

Services & integrations

Service configuration, URL schemes, universal links, and integration keys observed in the sanitized audit.

Firebase projects

sofi-mobile-e2f2asofi-mobile-e2f2a.appspot.com · https://sofi-mobile-e2f2a.firebaseio.com

SDK config keys

com.google.android.gms.ads.APPLICATION_IDGoogle Mobile Ads (AdMob)

Registered URL schemes

com.sofi.mobilehttphttpslink-popupplaidstripestripesdktest

Queries other apps

catch_.me_.if_.you_.can_com.android.chromecom.android.webviewcom.blogspot.newapphorizons.fakegpscom.discipleskies.mock_location_spoofercom.evezzon.fakegpscom.fakegps.fakelocationcom.fakegpslocation.spoofercom.google.android.apps.mapscom.google.android.apps.walletnfcrelcom.google.android.webviewcom.hopefactory2021.fakegpslocationcom.ifz.ghku.lftak.ejidzcom.incorporateapps.fakegps.frecom.incorporateapps.fakegps_routecom.instagram.androidcom.just4funtools.fakegpslocationprofessionalcom.lexa.fakegpscom.locationchangercom.luckydog.anygoappcom.luckypatchers.installercom.mobile.fakelocationcom.pogoskill.fakegpscom.rifsxd.ksunextcom.rosteam.gpsemulatorcom.spotify.musiccom.tenorshare.ianygo.fakegpscom.topjohnwu.magisk

Universal link hosts

app.sofi.comapp.sofitest.comlogin.sofi.comsofi-alternate.app.linksofi-alternate.test-app.linksofi.app.linksofi.test-app.linkwww.sofi.com
Allows arbitrary network loads

Network

Backend & API

Backend hosts, GraphQL operations, and certificate pinning signals detected in the app.

Backend hosts

app.sofi.comapp.sofitest.comcms.soficdn.netdesign.soficdn.netevents.sofi.comlogin.sofi.commobile.soficdn.netsofi-alternate.app.linksofi-mobile-e2f2a.firebaseio.comsofi.app.linksofi.comstatic.sofi.comwww.sofi.com

First party

App modules

Likely first-party modules and resource bundles detected in SoFi: Bank, Investing & Crypto.
com.soficom.sofi.mobile

Entitlements

Capabilities

System capabilities and entitlement flags included with the app.
Advertising IDBiometric authCameraContacts (read)Fingerprint authForeground serviceMicrophoneNotificationsPhone / carrier infoPrecise locationStorage (read)Storage (write)

APIs

Detected API usage

System frameworks and privacy-sensitive APIs referenced by the binary.
Android KeystoreBiometric authClassLoader useDynamic code loading (DexClassLoader)Play Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Privacy

Privacy signals

Privacy-related data types, tracking domains, and sensitive API signals detected statically.

Tracking domains

api.branch.ioapi2.branch.ioapi3-eu.branch.ioapp-measurement.comcdn.branch.iofirebase-settings.crashlytics.comgoogleads.g.doubleclick.nethelp.branch.iopagead2.googlesyndication.comsdk.iad-01.braze.comsdk.iad-03.braze.comsondheim.braze.comwww.braze.comwww.facebook.comwww.googleadservices.com

Accessed API samples

Ad SDK presentAdvertising IDAnalytics SDK presentBranchBrazeDatadogDatadog (native)Firebase AnalyticsFirebase CrashlyticsFirebase MessagingGoogle App MeasurementGoogle Mobile Ads (AdMob)Tracking/telemetry hosts in app strings

Architecture

Architecture details

Additional build and bundle signals that help explain how the app is structured.

Storyboards

0

Nibs

0

Build dependency versions

androidx.activity_activity1.12.4 · Google
androidx.activity_activity-compose1.12.4 · Google
androidx.activity_activity-ktx1.12.4 · Google
androidx.annotation_annotation-experimental1.4.1 · Google
androidx.appcompat_appcompat1.7.1 · Google
androidx.appcompat_appcompat-resources1.7.1 · Google
androidx.asynclayoutinflater_asynclayoutinflater1.0.0
androidx.autofill_autofill1.0.0 · Google
androidx.biometric_biometric1.1.0 · Google
androidx.browser_browser1.9.0 · Google
androidx.camera.featurecombinationquery_featurecombinationquery1.5.3 · Google
androidx.camera_camera-camera21.5.3 · Google
androidx.camera_camera-core1.5.3 · Google
androidx.camera_camera-lifecycle1.5.3 · Google
androidx.camera_camera-video1.5.3
androidx.camera_camera-view1.5.3
androidx.cardview_cardview1.0.0 · Google
androidx.compose.animation_animation1.10.6 · Google
androidx.compose.animation_animation-core1.10.6 · Google
androidx.compose.foundation_foundation1.10.6 · Google
androidx.compose.foundation_foundation-layout1.10.6 · Google
androidx.compose.material_material1.10.6
androidx.compose.material_material-ripple1.8.2 · Google
androidx.compose.runtime_runtime1.10.6 · Google
androidx.compose.runtime_runtime-annotation1.10.6 · Google
androidx.compose.runtime_runtime-livedata1.10.6
androidx.compose.runtime_runtime-retain1.10.6 · Google
androidx.compose.runtime_runtime-saveable1.10.6 · Google
androidx.compose.ui_ui1.10.6 · Google
androidx.compose.ui_ui-geometry1.10.6 · Google
androidx.compose.ui_ui-graphics1.10.6 · Google
androidx.compose.ui_ui-text1.10.6 · Google
androidx.compose.ui_ui-tooling-preview1.10.6 · Google
androidx.compose.ui_ui-unit1.10.6 · Google
androidx.compose.ui_ui-util1.10.6 · Google
androidx.compose.ui_ui-viewbinding1.10.6
androidx.constraintlayout_constraintlayout2.2.1 · Google
androidx.coordinatorlayout_coordinatorlayout1.1.0 · Google
androidx.core_core1.17.0 · Google
androidx.core_core-ktx1.17.0 · Google
androidx.core_core-viewtree1.0.0 · Google
androidx.cursoradapter_cursoradapter1.0.0 · Google
androidx.customview_customview1.1.0 · Google
androidx.customview_customview-poolingcontainer1.0.0 · Google
androidx.databinding_viewbinding8.13.2 · Google
androidx.datastore_datastore1.1.7 · Google
androidx.datastore_datastore-core1.1.7 · Google
androidx.datastore_datastore-preferences1.1.7 · Google
androidx.datastore_datastore-preferences-core1.1.7 · Google
androidx.documentfile_documentfile1.0.0 · Google
androidx.drawerlayout_drawerlayout1.1.1 · Google
androidx.dynamicanimation_dynamicanimation1.1.0 · Google
androidx.emoji2_emoji21.4.0 · Google
androidx.emoji2_emoji2-views-helper1.4.0 · Google
androidx.exifinterface_exifinterface1.4.2 · Google
androidx.fragment_fragment1.8.9 · Google
androidx.fragment_fragment-ktx1.8.9 · Google
androidx.graphics_graphics-path1.0.1 · Google
androidx.graphics_graphics-shapes1.0.1 · Google
androidx.interpolator_interpolator1.0.0 · Google
androidx.legacy_legacy-support-core-ui1.0.0
androidx.legacy_legacy-support-core-utils1.0.0 · Google
androidx.legacy_legacy-support-v41.0.0
androidx.lifecycle_lifecycle-livedata2.10.0 · Google
androidx.lifecycle_lifecycle-livedata-core2.10.0 · Google
androidx.lifecycle_lifecycle-livedata-core-ktx2.10.0 · Google
androidx.lifecycle_lifecycle-livedata-ktx2.10.0 · Google
androidx.lifecycle_lifecycle-process2.10.0 · Google
androidx.lifecycle_lifecycle-runtime2.10.0 · Google
androidx.lifecycle_lifecycle-runtime-compose2.10.0 · Google
androidx.lifecycle_lifecycle-runtime-ktx2.10.0 · Google
androidx.lifecycle_lifecycle-service2.10.0 · Google
androidx.lifecycle_lifecycle-viewmodel2.10.0 · Google
androidx.lifecycle_lifecycle-viewmodel-compose2.10.0 · Google
androidx.lifecycle_lifecycle-viewmodel-ktx2.10.0 · Google
androidx.lifecycle_lifecycle-viewmodel-savedstate2.10.0 · Google
androidx.loader_loader1.0.0 · Google
androidx.localbroadcastmanager_localbroadcastmanager1.1.0 · Google
androidx.media_media1.0.0 · Google
androidx.metrics_metrics-performance1.0.0-beta02
androidx.navigation_navigation-common2.9.7 · Google
androidx.navigation_navigation-compose2.9.7 · Google
androidx.navigation_navigation-fragment2.9.7
androidx.navigation_navigation-fragment-ktx2.9.7
androidx.navigation_navigation-runtime2.9.7 · Google
androidx.navigation_navigation-ui2.9.7
androidx.navigation_navigation-ui-ktx2.9.7
androidx.navigationevent_navigationevent1.0.2 · Google
androidx.navigationevent_navigationevent-compose1.0.2 · Google
androidx.preference_preference1.2.1
androidx.print_print1.0.0 · Google
androidx.privacysandbox.ads_ads-adservices1.1.0-beta11 · Google
androidx.privacysandbox.ads_ads-adservices-java1.1.0-beta11 · Google
androidx.profileinstaller_profileinstaller1.4.0 · Google
androidx.recyclerview_recyclerview1.4.0 · Google
androidx.room_room-ktx2.6.1 · Google
androidx.room_room-runtime2.6.1 · Google
androidx.savedstate_savedstate1.4.0 · Google
androidx.savedstate_savedstate-compose1.4.0 · Google
androidx.savedstate_savedstate-ktx1.4.0 · Google
androidx.security_security-crypto1.1.0
androidx.slidingpanelayout_slidingpanelayout1.2.0
androidx.sqlite_sqlite2.4.0 · Google
androidx.sqlite_sqlite-framework2.4.0 · Google
androidx.startup_startup-runtime1.1.1 · Google
androidx.swiperefreshlayout_swiperefreshlayout1.1.0 · Google
androidx.tracing_tracing1.2.0 · Google
androidx.tracing_tracing-ktx1.2.0 · Google
androidx.transition_transition1.6.0 · Google
androidx.vectordrawable_vectordrawable1.1.0 · Google
androidx.vectordrawable_vectordrawable-animated1.1.0 · Google
androidx.versionedparcelable_versionedparcelable1.1.1 · Google
androidx.viewpager2_viewpager21.1.0-beta02 · Google
androidx.viewpager_viewpager1.0.0 · Google
androidx.webkit_webkit1.15.0 · Google
androidx.window_window1.5.0 · Google
androidx.window_window-core1.5.0 · Google
androidx.window_window-java1.5.0
androidx.work_work-runtime2.9.0 · Google
androidx.work_work-runtime-ktx2.9.0 · Google
com.google.android.material_material1.13.0 · material-components
com.google.dagger_dagger2.58 · Google
com.google.gson?
com.google.protobuf?
Dagger? · Google
javax.inject? · JSR 330
kotlinx.serialization? · JetBrains
kotlinx_coroutines_android1.10.2
kotlinx_coroutines_core1.10.2
kotlinx_coroutines_jdk81.10.2
kotlinx_coroutines_play_services1.10.2
kotlinx_coroutines_slf4j1.10.2

Explore technologies across all apps

Browse every SDK, framework, and language we detect, then compare the apps that share the same stack.

App tech stacks →
SoFi: Bank, Invest & Crypto app icon

Live from Google Play

SoFi: Bank, Invest & Crypto

Social Finance, LLC
Open in Google Play(opens in new tab)Developer site(opens in new tab)RSS feed

Rating

3.8 (53,671)

Price

Free

Installs

5M+ installs

Version

v3.112.0

PassiveTech stackIcons
Store ProfileApp IconsBuild Stack