Threema is analyzed more than any other messenger.
2024: Audit by Cure53 of the new desktop app, see blog post and audit report
2023: Security analysis of the “Ibex” communication protocol by security researchers from the Chair of Applied Cryptography at the University of Erlangen-Nuremberg, see blog post and analysis
2020: Audit by Cure53, see blog post and audit report
2019: Audit by Lab for IT Security of the Münster University of Applied Sciences, see blog post and audit report
All the reports can be found here:
https://threema.com/en/faq/code-audit
older
2016 = The german Chaos Computer Club decompiles Threema
https://media.ccc.de/v/33c3-8062-a_look_into_the_mobile_messaging_black_box#t=3225
2015 = External Security Audit
2012 = Threema Code-Analyses from the University of Amsterdam
Janneke
npub1j3…dxppj
2026-01-17 15:11:07 UTC
in reply to nevent1q…rwtq
Author Public Key
npub1j3drxxn6cqkxamv5chn6kflregxf993cde2hahancdcll0eskr4qadxppjPublished at
2026-01-17 15:11:07 UTCEvent JSON
{
"id": "db06580bb66dcddf981538cde7381fa72b7ef3976ac86049022581ec977bee25",
"pubkey": "945a331a7ac02c6eed94c5e7ab27e3ca0c9296386e557edfb3c371ffbf30b0ea",
"created_at": 1768662667,
"kind": 1,
"tags": [
[
"e",
"0cf25cd2bafe3f269f55b734ee9d313029bd1dc3f95fc38d462441c0a7f96b85",
"",
"root",
""
],
[
"e",
"00238097c9d1f1be0b3b48d0125185e48e2e656558e146db0428b605dd18a8ba",
"",
"reply"
],
[
"p",
"945a331a7ac02c6eed94c5e7ab27e3ca0c9296386e557edfb3c371ffbf30b0ea",
"",
"Janneke"
],
[
"p",
"7055fc42c9a638ab56ad057016a2deface97b5eece31a3a7a46727ad847899e5",
"",
"librekitty"
],
[
"p",
"42a41978c51cb00695a18de6c9754b90e208dd31d2851e7c69104899c1aea03e"
],
[
"r",
"wss://nostr.tavux.tech/"
],
[
"r",
"wss://freelay.sovbit.host/"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://nostr.data.haus/"
],
[
"r",
"wss://relay.lawallet.ar/"
]
],
"content": "Threema is analyzed more than any other messenger.\n\n2024: Audit by Cure53 of the new desktop app, see blog post and audit report\n2023: Security analysis of the “Ibex” communication protocol by security researchers from the Chair of Applied Cryptography at the University of Erlangen-Nuremberg, see blog post and analysis\n2020: Audit by Cure53, see blog post and audit report\n2019: Audit by Lab for IT Security of the Münster University of Applied Sciences, see blog post and audit report\n\nAll the reports can be found here:\nhttps://threema.com/en/faq/code-audit\n\nolder\n2016 = The german Chaos Computer Club decompiles Threema\nhttps://media.ccc.de/v/33c3-8062-a_look_into_the_mobile_messaging_black_box#t=3225\n\n2015 = External Security Audit\n2012 = Threema Code-Analyses from the University of Amsterdam\n\n",
"sig": "22321199cc977c0ed7dba9e8a89b474cf47ace5ca0e32566557efa6ac019f4cc3600e19d889bd23e6e6a4a4acd2575a3aded1e3b20581ba079ff5c7cbb63ab82"
}