Cake Wallet embeds self-custodial Bitcoin inside Signal
- Cake Wallet built Radar to run self-custodial Bitcoin transactions inside Signal without leaving active chats.
- Foundation Devices introduced sandboxed app isolation to prevent device code bugs from exposing wallet seed keys.
- A Trezor logistics breach leaked 14,000 customer shipping addresses, creating severe physical extortion risks.
Chatting and paying no longer require two separate applications.
Seth For Privacy and the Cake Wallet team launched Radar, an open-source tool embedding self-custodial Bitcoin payments directly into Signal's messaging architecture. Built on Signal's open-source AGPL v3 codebase, Radar reuses payment rails originally created for MobileCoin. Users settle Lightning and Spark transactions inside chat threads without switching apps. On What Bitcoin Did, host Danny Knowles noted that previous tipping tools required custodial trade-offs or separate networks. Radar retains full compatibility with existing Signal contacts while keeping chat threads end-to-end encrypted.
The architecture relies on privacy trade-offs. Spark operates like a virtual private network for Bitcoin transfers, concealing individual payment streams from public block explorers while requiring operator nodes to track internal transaction state. Seth For Privacy noted that while off-chain privacy protects against external eavesdroppers, emergency unilateral exits to Bitcoin's mainnet remain mathematically guaranteed but economically punishing. High base-layer network fees can make reclaiming small balances on-chain financially unviable.
Cake Wallet also deployed local Nvidia DGX Spark hardware to run private AI models internally instead of using third-party APIs. But privacy tools face growing physical and software threats. On Ungovernable Misfits, Q from Foundation Devices argued that traditional air gaps offer false comfort when signers run monolithic code. Combining dozens of unisolated features into a single codebase means a single flaw anywhere in the software can expose master private keys.
To counter monolithic code risks, Foundation Devices launched its KeyOS 1.4 beta for the Passport Prime signer. The update isolates applications into sandboxes, preventing side-loaded apps or utilities like two-factor authentication tools from reaching root key generation or transaction signing logic. Q revealed that upcoming firmware will allow users to uninstall auxiliary applications entirely, shrinking the device's attack surface down to a minimal QR-only signing state.
Physical logistics leaks pose an equally acute threat to self-custodial users. A recent data breach at a Trezor logistics contractor exposed the real-world shipping addresses of nearly 14,000 customers. Host Max and Q warned that leaked delivery databases allow physical extortionists to cross-reference customer names with public blockchain records. To preserve physical operational security, they urged buyers to acquire hardware signers in person or ship orders to workplace drop points and PO boxes.
The broader privacy landscape is shifting rapidly under regulatory and institutional pressure. As Chainalysis sues the federal government over a $95 million ICE contract awarded to TRM Labs - which now holds $128 million in federal obligations - users are moving toward self-contained privacy solutions. Cake Wallet reported that Monero swaps across decentralized protocols now account for over 75 percent of its total exchange volume, reflecting a broader migration away from centralized venues and toward integrated, self-custodial infrastructure.
Source Intelligence
- Deep dive into what was said in the episodes
The Brief Goes Weekly | THE BITCOIN BRIEF 87 • Aug 26
- Q announced KeyOS version 1.4 beta for Passport Prime, introducing a new launcher, light mode, and third-party app sideloading. Sandboxing isolates these applications, preventing malicious code from accessing the master seed, secrets, or the Bitcoin app.
- Q argues that monolithic hardware wallet architectures are fundamentally flawed. The Cold Card contained up to 50 unisolated features in a single code block, proving that airgaps and Bitcoin-only designs do not guarantee security when code bases lack sandboxing.
- Q revealed that upcoming Passport firmware updates will allow users to uninstall preinstalled applications like 2FA and password vaults. This allows custom configuration of the device's attack surface, including a minimal, QR-only setup without using the Envoy companion app.
- Seth and the Cake Wallet team purchased Nvidia DGX Spark hardware to run local, private AI models. Q and Mark note that local deployments are becoming viable alternatives to centralized AI APIs for privacy-conscious developers.
- A data breach at a Trezor logistics provider exposed over 13,000 customer records, including physical shipping addresses. Q advises purchasing hardware wallets using PO boxes, business addresses, and paying with cryptocurrency to prevent physical attack risks from shipping leaks.
- Chainalysis is suing the US government over a $95 million ICE contract awarded to competitor TRM Labs. TRM Labs now holds $128 million in active US contract obligations, dwarfing Chainalysis's lifetime federal contract value.
Also discussed on this episode: (5)
Privacy (2)
- Mark recommends using Dead Hash, a simplified signature verification tool, to validate software downloads. The mobile and desktop application streamlines SHA-256 hash checks, making cryptographic verification accessible for non-technical users.
- Mark recommends Mindenbox for anonymous virtual private and dedicated server hosting. The service preserves user privacy by requiring no personal information and accepting payments exclusively in Bitcoin, Lightning, and Monero.
Lightning (2)
- LND nodes running versions prior to 0.20 were vulnerable to a chain reorg exploit where attackers could publish old, revoked commitment transactions to drain funds. Developer Bastian Teinturier disclosed the vulnerability, which was patched in late February.
- A new cryptographic proposal called Iceberg enables nested threshold multisig protocols for the Lightning Network. This allows institutional nodes to distribute signing keys across multiple servers while appearing as a standard, single-key node to counterparties.
Payments (1)
- Mark integrated the Flint Spark wallet into the Ungovernable BTCPay Server to simplify lightning payment processing. The software supports automatic revenue sweeping to cold storage and auto-swaps to stablecoins to mitigate bitcoin exchange rate volatility.
Danny Knowles
The Plan to Put Bitcoin in Every Conversation | Seth For Privacy • Aug 25
- Cake Wallet's leadership team launched Radar, a consumer communication and payment app built on the Signal protocol. Backed by Ego Death Capital, the app integrates self-custodial Bitcoin payments directly into private chat interfaces.
- Radar achieves compatibility with the Signal network by utilizing the open-source AGPL v3 license. The app repurposed internal payment rails originally built by Signal for MobileCoin to facilitate self-custodial Lightning and Spark transactions.
- Spark operates on a VPN provider model where operators can view transaction details but hide them from the public. Seth for Privacy notes this prevents third parties from viewing transaction histories via block explorers, though operators must log state.
- Unilateral exits from Spark and Arc are mathematically guaranteed but economically punishing. Exiting a small number of leaf UTXOs on-chain can require dozens of transactions, making some low-value exits financially unviable during high fee environments.
- Regulatory delistings have pushed Monero trading from centralized venues to cross-chain swap protocols and decentralized exchanges. Cake Wallet reports that Monero swaps account for over 75 percent of its transaction volume.
Also discussed on this episode: (9)
Privacy (7)
- Seth for Privacy argues that the leaked Signal chats of journalist Tucker Carlson resulted from an operating system breach, not a protocol failure. OS-level spyware like Pegasus bypasses end-to-end encryption by capturing screen data directly.
- Desktop operating systems lack the hardware-level secure enclaves found in modern iOS and Android smartphones. Seth for Privacy advises high-profile users to avoid desktop chat clients entirely due to the inherent difficulty of securing stored databases.
- A critical vulnerability discovered in the Zcash Orchard shielded pool allowed undetected infinite token printing. Because Orchard is private, investigators cannot determine if the bug was exploited prior to its emergency patch.
- Zcash is forcing users to migrate to the new Ironwood pool through a transparent turnstile that exposes transaction amounts. If an attacker printed excess Zcash, they could frontrun honest users and drain the entire migration pool.
- Monero plans to implement full chain membership proofs to upgrade its transaction anonymity set. This cryptographic upgrade expands the decoy pool from 16 inputs to the entire transaction history of 150 million outputs.
- Silent payments allow reusable static Bitcoin addresses but suffer from heavy client-side scanning times. Craig Raw developed Frigate, a server that temporarily scans with an ephemeral view key before deleting it to preserve user privacy.
- Payjoin transactions require both sender and receiver to contribute inputs, breaking the common input ownership heuristic. Achieving ten percent adoption of Payjoin would effectively break standard chain analysis heuristics for the entire Bitcoin network.
Adoption (1)
- Cake Wallet has expanded its user base to over two million total users, including more than half a million active Lightning network participants.
Nostr (1)
- Agora is a newly launched decentralized fundraising platform that uses Nostr as a web of trust. The platform utilizes silent payments to route donations directly to recipients without relying on central custodians.