diff --git a/ostp-client/src/transport/xhttp.rs b/ostp-client/src/transport/xhttp.rs
index b3eb6a0..ba9169b 100644
--- a/ostp-client/src/transport/xhttp.rs
+++ b/ostp-client/src/transport/xhttp.rs
@@ -33,6 +33,13 @@ pub async fn connect_xhttp(
         .with_context(|| format!("failed to connect to {}", addr))?;
     tcp_stream.set_nodelay(true)?;
 
+    #[cfg(target_os = "android")]
+    {
+        use std::os::unix::io::AsRawFd;
+        let fd = tcp_stream.as_raw_fd();
+        crate::bridge::invoke_socket_protector(fd);
+    }
+
     if reality_enabled {
         let pbk_bytes = base64::engine::general_purpose::URL_SAFE_NO_PAD.decode(reality_pbk)
             .context("invalid reality_pbk base64")?;
diff --git a/ostp-flutter/ostp-client-release.apk b/ostp-flutter/ostp-client-release.apk
index 3e81ca6..fce89c4 100644
Binary files a/ostp-flutter/ostp-client-release.apk and b/ostp-flutter/ostp-client-release.apk differ
diff --git a/ostp-gui/src-tauri/Cargo.lock b/ostp-gui/src-tauri/Cargo.lock
index 85b25c3..96c8239 100644
--- a/ostp-gui/src-tauri/Cargo.lock
+++ b/ostp-gui/src-tauri/Cargo.lock
@@ -2641,7 +2641,7 @@ dependencies = [
 
 [[package]]
 name = "ostp-client"
-version = "0.2.69"
+version = "0.2.71"
 dependencies = [
  "anyhow",
  "base64 0.22.1",
@@ -2671,7 +2671,7 @@ dependencies = [
 
 [[package]]
 name = "ostp-core"
-version = "0.2.69"
+version = "0.2.71"
 dependencies = [
  "anyhow",
  "bytes",