
Bitcoin Wallet - Buy BTC
latest release: 3.5.2 last analysed 30th November 2020Published:
Our last analysis is based on data found in their Play Store description and their website.
details below
Older reviews (show 0 of 2 reproducible)
Help spread awareness for build reproducibility
Please help us spread the word, asking Bitcoin Wallet - Buy BTC to support reproducible builds via their Twitter!
Do your own research!
Try out searching for "lost bitcoins", "stole my money" or "scammers" together with the wallet's name, even if you think the wallet is generally trustworthy. For all the bigger wallets you will find accusations. Make sure you understand why they were made and if you are comfortable with the provider's reaction.
If you find something we should include, you can create an issue or edit this analysis yourself and create a merge request for your changes.
The Analysis
The wallet re-branded at some point to Coinbox Bitcoin Wallet and is now a blatant scam.
As demonstrated by “BTC Sessions” Ben the wallet features a mnemonic backup that is purely decorative and has nothing to do with your wallet. Ben mentions a few more red flags that convinced us to not give them the benefit of the doubt. This is the sort of wallet we try to warn you of. It is also obfuscating the app, so it gets a bit harder to figure out what’s going on but the evidence as presented in the video leaves no other conclusion.
Do not use this app. You will lose your money.
(lw)
Verdict Explained
Obfuscated
The app's binary contains active obfuscation which makes it significantly harder to analyze what it is doing.
This verdict means that the app could not be decompiled. In benign cases code symbols are replaced by short strings to make the app smaller but for the sake of transparency this should not be done for non-reproducible Bitcoin wallets. (Reproducible wallets could obfuscate the app for size improvements as the reproducibility would assure the auditability.)
The app cannot be independently verified. If the provider puts your funds at risk on purpose or by accident, you will probably not know about the issue before people start losing money. If the provider is more criminally inclined he might have collected all the backups of all the wallets, ready to be emptied at the press of a button. The app might have a formidable track record but out of distress or change in management turns out to be evil from some point on, with nobody outside ever knowing before it is too late.
Share on
Twitter Facebook LinkedInOr embed a widget in your website
<iframe
src="/widget/#appId=com.polehin.android&theme=auto&style=short" name="_ts"
style="min-width: 180px;border: 0;border-radius: 10px;max-width:280px;height: 130px;" >
</iframe>
and
<iframe
src="/widget/#appId=com.polehin.android&theme=auto&style=long"
style="max-width:100%;width:342px;border:0;border-radius:10px;min-height: 510px;" >
</iframe>