Website: cypherbox.io · Community: Telegram · Email: info@cypherbox.io
Cypher Box walks you up the self-custody ladder: start with an easy custodial Lightning account(s), graduate to a Hot/Ark vault, and land in full on-chain cold storage for long term secure storage. You can reverse the flow and top-up coins from cold storage back to your hot or lightning wallets for cheap fast payments.
Cloned from BlueWallet 6.5.1. Built with React Native + Electrum, powered by Strike, Coinos, and Second's Bark SDK.
| Rail | Custody | Network | Best for |
|---|---|---|---|
| ⚡ Lightning Accounts | Custodial (Strike / Coinos) | Lightning | First sats, everyday spending |
| ⛵ Bark Vault | Self-custodial | Ark protocol (L2) | Lightning speed, your keys, experimental |
| 🔥 Hot Vault | Self-custodial | Bitcoin on-chain | Savings on your device |
| 🧊 Cold Vault | Self-custodial (watch-only) | Bitcoin on-chain | Offline Hardware-signed savings |
Swap between rails in-app: Lightning ↔ Bark, top-up vaults from Lightning, withdraw Lightning to vaults.
- OAuth login (Strike) or credentials (Coinos); tokens live only in your device Keychain
- Send/receive Lightning and on-chain BTC; Liquid receive via Coinos
- Lightning addresses, payment history, withdrawal-threshold reminders
- Real-time payment notifications via a self-hosted relay
- Swap between accounts, withdraw to vaults, top-up from vaults
Read full user guide: https://cypherbox.io/how-to-use-your-bark-vault/ Your sats live in lightning capsules (VTXOs) on Bitcoin mainnet via the Ark protocol and Second's Bark SDK. Self-custodial: you can exit to the chain without the server's permission (not completed ⏳).
-
Send & receive over Lightning, receive on Ark addresses, board from on-chain
-
Capsule dashboard with color-coded expiry at a glance:
Lightning Capsule age Meaning 🟢 21+ days left Fresh, nothing to do 🟡 14–20 days Past the midpoint 🟠 7–13 days Refresh window open 🔴 < 7 days Refresh now, reminders firing -
Tap-to-refresh reminders: up to 5 escalating notifications (4d/2d/24h/12h/6h) before any capsule expires; tapping one opens the app with the refresh already running
-
Encrypted backups (
.cbark): iCloud Drive on iOS, folder of your choice + Google Drive on Android, verified round-trip at wallet creation -
Emergency exit: unilateral on-chain sweep, no server cooperation needed
-
Transparent fees shown inline before every action
- Keys generated and stored on-device, never leave it
- SegWit-first, BIP39, RBF + CPFP
- Roll your own entropy: generate the 12 words from your own dice or coin rolls instead of the device RNG
- Optional BIP39 passphrase ("25th word"), never stored anywhere: recovery needs the seed and the passphrase
- Coin control with UTXO visualization: label, consolidate, pick coins
- Cold Vault: watch-only + PSBT signing with BBQr animated QR for airgapped hardware
- Custom Electrum server support, plausible deniability
- Privacy boundary: the app is wired so your xPub is never exposed to the Lightning custodians or exchanges; they only ever see the single address you chose to withdraw to. Users are advised to practice good coin control and labelling.
Every release is reproducible:
- CI builds the unsigned bundle twice in a pinned container and fails on any byte difference
- Releases ship with the unsigned artifact + SHA-256 and a signed git tag: releases
- Rebuild it yourself:
make repro-verifyat any release tag - walletscrutiny/ contains the verification script for comparing the Play Store binary against this source
- PRs are gated by dependency review, secret scanning (gitleaks), and unit tests
Minimum Node/npm versions: see
enginesinpackage.json(use even-numbered LTS). Toolchain pins, Gradle cache rules, codegen gotchas and other build-environment notes live in docs/BUILD.md.
git clone https://github.com/CypherBoxLLC/Cypher-Box.git
cd Cypher-Box
npm ci # always ci, never plain install — keeps the lockfile authoritative- Open
android/in Android Studio - Start an AVD or connect a device
npx react-native run-android
npx pod-install
npm start
# in another terminal:
npx react-native run-iosiOS Simulator debug: Product → Destination Architectures → Show Both → pick a Rosetta-compatible simulator.
npx pod-install
npm start
# open ios/BlueWallet.xcworkspace, scheme BlueWallet-NoLDK, Run- ✅ Bark SDK upgrade (bark 0.6.1): capsules stay spendable while refreshing, dust consolidation, safer exit
- ⏳ Revive the e2e test suite on RN 0.77
Found a vulnerability? Email info@cypherbox.io — please don't disclose publicly until it's resolved. Valid, responsible disclosures may qualify for a bounty based on severity. See SECURITY.md.
License: MIT · Upstream: BlueWallet · Bark SDK: Second