Resolve Android False Trojan Flag

Project: Android APK Trojan Detection – Security Analysis and Resolution
My released APK triggers “Trojan” alerts on some Xiaomi, OPPO, and vivo devices. I need an experienced Android security engineer to identify the root cause and help resolve the issue.
The initial investigation should focus on potential security detection triggers, including suspicious code signatures, permissions, third-party libraries, and APK components.
To the best of my knowledge, no third-party SDKs are included. However, the app requests both standard and sensitive permissions, which should also be examined.
Scope of Work
Phase 1 – Initial Security Analysis ($100–200)
- Decompile and analyze the APK to identify potential detection triggers.
- Investigate suspicious code, permissions, libraries, and APK signatures.
- Determine whether the detection is a false positive or a genuine security threat.
- Identify the likely root cause and provide supporting evidence.
- Deliver a clear report with findings and recommended solutions.
Phase 2 – Fix and Verification (Budget Negotiable)
- Recommend and assist with legitimate code or configuration fixes.
- Help verify whether the security warnings have been resolved.
- Assist with false-positive submissions to security vendors if necessary.
- Provide additional technical support if required.
Budget Clarification
The original $1,000 budget represents the maximum potential budget for the complete investigation and resolution.
However, I prefer to divide the project into smaller milestones.
The initial milestone will focus exclusively on identifying the root cause, with a budget of $100–200 USD.
Further implementation and verification costs will be discussed separately based on the findings.
Source Code and Confidentiality
I have the complete source code, but I prefer to share only the APK for the initial investigation.
Relevant source code sections may be provided if necessary after the initial analysis.
I do not intend to share the entire source code unless absolutely necessary.
What I'm Looking For
- Experience with Android APK security analysis and reverse engineering.
- Familiarity with Android antivirus detection and false-positive investigations.
- Ability to identify technical issues rather than simply promise a quick fix.
- Clear communication and fast turnaround.
When submitting your proposal, please include:
1. Your experience with similar Android APK security detection issues.
2. Your proposed investigation approach.
3. Your estimated cost for Phase 1 ($100–200).
4. Your estimated turnaround time.
I am looking for a reliable technical expert who can identify the actual problem and provide a practical, legitimate solution.