EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened

On April 15, 2026, the EU launched the age verification "mini-wallet" app. Within 24 hours, security researcher Paul Moore published a video claiming he bypassed it in 2 minutes. The story went viral across Reddit with tens of thousands of upvotes. The headlines write themselves, but the technical reality is more nuanced. The Three Flaws Paul Moore identified three design flaws in the wallet app's local device implementation: 1. PIN decoupled from the credential vault The PIN protecting the wall