A self-custodial Bitcoin wallet with a focus on intutive design, privacy, and modular customizability.
Designed for experienced users - no hand-holding, no training wheels.
- Multi-Wallet - Create, import, export, and switch between multiple wallets
- Multi-Seed - Supports BIP39 or Electrum seed phrases for wallet imports
- Multisig Wallets - Import multisig descriptors, coordinate PSBT signing, and sign locally as a cosigner
- Watch-only Wallets - Import xpub/zpub, output descriptors, or single address
- Import Private Key - Sweep or import private keys (WIF format)
- Hardware Wallet Signing - Use animated QR codes or .psbt files for air-gapped key signing
- Coin Control - Select specific UTXOs, freeze/unfreeze, send from individual outputs
- RBF & CPFP - Bump fees on unconfirmed transactions, including multisig-safe PSBT fee bump flows
- Cancel Transactions - Cancel unconfirmed outgoing transactions with RBF
- Manual Broadcast - Broadcast any signed raw transaction directly to the Bitcoin network
- Batch Sending - Send to multiple recipients in a single transaction
- Silent Payments - Send to BIP-352 Silent Payment addresses
- Message Signing - Sign and verify messages with BIP137
- BIP329 Labels - Industry-standard wallet labels for transactions and addresses
- Transaction Search - Search transaction history by date, amount, address, or label
- Built on BDK
- Modular Integration - Choose which Layer 2 to enable for each wallet
- Liquid - Full Liquid wallet with doconfidential transactions (Built on LWK)
- Spark - Spark wallet integration with Lightning and on-chain send and receive (Built on Breez-SDK)
- Lightning Payments - Pay Bolt 11 and Bolt 12 invoices, or Lightning addresses
- Lightning Invoices - Generate Bolt 11 invoices
- Watch-only Liquid Wallets - Import Liquid watch-only wallets using SLIP77 descriptors
- Liquid USDt - Hold and transact USDt on Liquid
- Chain Swaps - Easily swap between L1 and L2
- Coin Control - Select specific UTXOs for swaps and payments
- BIP329 Labels - Label support for Liquid and Spark transactions
- Offline by Default - App launches with zero external connections
- Built-in Tor - Native Tor integration, no need for Orbot or external proxies
- PIN & Biometrics - With configurable lock timing
- Privacy Toggle - Hide all wallet amounts and balances
- Wallet Locks - Lock specific wallets independently
- Duress PIN - Configure a duress PIN that opens a decoy wallet
- Auto-Wipe - Set a threshold for failed unlocks that automatically and irreversibly wipes all app data
- Cloak Mode - Disguise Ibis as a calculator app
- Hardened Metadata - Sanitized logs and UI errors for reduced OS-visible metadata
- Custom Servers - Connect to your own Electrum, block explorer, and fee estimation servers
- NFC Support - Broadcast and receive payment requests via NFC tap
- Bitcoin URI Handling - Register as a handler for
bitcoin:links
- Languages - English, Russian, Spanish, and Portuguese (Brazil)
- Full Encrypted Backups - Backup and restore the entire app state including wallets, settings, and labels
Requires Android Studio with JDK 17.
./gradlew :app:assembleDebug # Debug
./gradlew :app:assembleRelease # Release
./gradlew testDebugUnitTest # Tests
./gradlew jacocoUnitTestReport # Generate coverage reportMin SDK: 26 (Android 8.0) | Target SDK: 35 | ARM only (armeabi-v7a, arm64-v8a)
We are offering $1,000 paid in BTC for any critical vulnerabilities in Ibis Wallet that could lead to unauthorized loss of user funds.
In scope for the bounty are vulnerabilities that provide a practical, realistic attack path resulting in theft or permanent loss of funds for users (e.g. remote compromise of the wallet, seed extraction, transaction manipulation, etc.).
Lower severity issues, theoretical vulnerabilities without a practical exploit path, or findings that do not lead to fund loss will be acknowledged but are generally out of scope for monetary rewards.
Ibis is coded and audited by the most current frontier AI models.
Open source. See LICENSE for details.