BTC.com - Bitcoin WalletGoogle Play
Our wallet review process
We examine wallets starting at the code level and continue all the way up to the finished app that lives on your device. Provided below is an outline of each of these steps along with security tips for you and general test results.
Application build test result
This app claims:
- Bitcoin (BTC) & Bitcoin Cash (BCH) support
- 100% control of your private keys
so it’s a self-custodial BTC wallet. And it’s also open source:
This wallet is a free and open source software. You can view the code on GitHub at http://github.com/blocktrail/blocktrail-wallet.
That’s great but can we reproduce the app?
On Google Play the “current version” is
4.4.7 and on GitHub we find a tag for
The Readme.md also contains compile instructions. Let’s do this:
$ git clone https://github.com/blocktrail/blocktrail-wallet
$ cd blocktrail-wallet/
$ git checkout v4.4.7
$ docker run -it --volume $PWD:/mnt --workdir /mnt --rm beevelop/cordova bash
root@f74eea3c3d23:/mnt# npm install -g npm # make sure npm is latest version
root@f74eea3c3d23:/mnt# npm_config_engine_strict=false npm install -g firstname.lastname@example.org email@example.com gulp
root@f74eea3c3d23:/mnt# npm install
(node:39) ExperimentalWarning: The fs.promises API is experimental
npm ERR! code 1
npm ERR! path /mnt/node_modules/@sentry/cli
npm ERR! command failed
npm ERR! command sh -c node scripts/install.js
npm ERR! Error: Command failed: /mnt/node_modules/@sentry/cli/sentry-cli --version
npm ERR! error: Failed to load .sentryclirc file from the home folder.
npm ERR! caused by: Permission denied (os error 13)
npm ERR! A complete log of this run can be found in:
npm ERR! /root/.npm/_logs/2021-03-05T02_14_24_795Z-debug.log
apparently is a file that has to be in the home folder
with some sort of credentials, we probably can’t build the project without this
further step and conclude the app is not verifiable.
Apart from there being source code it is worth mentioning that the app was not updated since July 2019 and many 1* ratings complain about financial loss!
Do your own research
In addition to reading our analysis, it is important to do your own checks. Before transferring any bitcoin to your wallet, look up reviews for the wallet you want to use. They should be easy to find. If they aren't, that itself is a reason to be extra careful.