The Tor Project takes a major step toward launching its mobile VPN with successful Cure53 audit

Three smartphones over a blue and purple background, each running the Tor VPN app.

• Security firm Cure53 performed a penetration test on TorVPN for Android and its Onionmasq networking layer in June 2025.
• The assessment found no fundamental flaws in how the application routes traffic or establishes secure tunnels to the Tor network.
• Developers are currently patching low-level DNS and input validation bugs that could potentially lead to denial-of-service in rare scenarios.

For millions of users worldwide, the Tor network is the gold standard for staying anonymous online. Now, the developers behind the project are moving closer to launching a dedicated mobile application, and a new independent code audit suggests the technical foundations are rock solid.