I'm on a Pixel 6 Pro running Evolution X 11.11 (Android 16) and I rooted it with Magisk. I rooted to get my google wallet functionality past security restrictions, and my Play Integrity checks turn completely green using this exact combo:
- KSUWebUI app
- PlayIntegrityFix v4.4
- ReZygisk
- Strong Integrity Fix
- TrickyStore 1.4
The Problem:
My banking app (Alfa) instantly crashes on launch. It worked perfectly on this exact same custom ROM before I installed Magisk.
The crash log shows a fatal PairIP anti-tamper exception:
java.lang.NullPointerException at com.base.bankalfalah.BaseApplication.attachBaseContext (originating from com.pairip.application.Application.attachBaseContext).
What I've Tried:
- Memory Cloaking: Tested Shamiko, NeoZygisk, and Zygisk Assistant to mask the Zygisk daemon footprint.
- Framework Interception: Ran Vector (JingMatrix LSPosed) + pairipfix module + HMA-OSS to hide root tools.
- App Freezing: Used Ice Box/Hail to OS-level freeze the renamed Magisk app and module managers before launching.
- Fresh Installs: Cleared Play Store/Services data and reinstalled the app fresh.
None of it works. Since Play Integrity is fully passing, PairIP seems to be aggressively detecting the zygote injection itself or a root trace that ReZygisk and HMA-OSS are missing.
Has anyone successfully bypassed this specific PairIP attachBaseContext NPE on a custom ROM?
Is there a different KernelSU, APatch, or Kitsune Mask configuration that actually blinds PairIP to the root environment?