Cake Wallet security and release history
As of 25 October 2026, this timeline lists 30 dated events in Cake Wallet's history: security issues and fixes, scam campaigns, coin additions and removals and major releases, including 4 exploits or vulnerabilities. The most serious issue was the weak Bitcoin seeds created by Cake Wallet in 2020–2021, which attackers began sweeping in 2024.
Quick facts
- What were the most serious incidents?
- See the timeline.
- What is the latest entry?
- 2026-10-12: Version 6.5.0 adds Robinhood Chain and Bitcoin accounts and starts phasing out Zano.
- What is the main lesson?
- Install Cake Wallet only from the official app stores, cakewallet.com or the official GitHub releases; never share your seed; and if you still use a Bitcoin wallet created in Cake Wallet in 2020–2021, move the funds to a new wallet.
Timeline
| Date | Product | Type | Reported loss | What happened | Source |
|---|---|---|---|---|---|
| 2026-10-12 | All apps | network change | — | Version 6.5.0 adds Robinhood Chain and Bitcoin accounts and starts phasing out Zano. | docs.cakewallet.com |
| 2026-10-06 | Lightning | other | — | Review site WalletScrutiny relabels Cake Wallet 'custodial' because the optional Lightning balance relies on Spark operators co-signing withdrawals and the app does not offer the unilateral exit; the label concerns the Lightning balance, not the on-chain wallets. Cake describes its Lightning as self-custodial. | walletscrutiny.com |
| 2026-09-18 | All apps | other | — | Cake creates a new release-signing key (dated 18 September 2026 in its verification guide) for signed checksums and tags; older tags are unsigned. | github.com |
| 2026-09-04 | EVM wallets | vulnerability | — | Advisory GHSA-695v-fhpj-fv8x (moderate): payment requests could be sent on the wrong EVM network because the chain ID was dropped. It affected versions 6.1.2–6.3.0 and was fixed in 6.4.4. | github.com |
| 2026-06-05 | All apps | release | — | Version 6.2.0 adds Trezor support for Monero. | docs.cakewallet.com |
| 2026-02-25 | All apps | release | — | Version 6.0.0: full redesign and Bitcoin Lightning. | docs.cakewallet.com |
| 2026-01-30 | All apps | network change | — | A user report on version 5.8.0 shows Wownero wallets can no longer be created or restored; existing ones open only to show seeds and keys. The exact version that removed Wownero is not documented. | forum.cakewallet.com |
| 2026-01-12 | All apps | network change | — | Version 5.7.0 adds Zcash. | github.com |
| 2025-10-15 | All apps | release | — | Version 5.5.0 adds Trezor and BitBox hardware wallets and Base. | github.com |
| 2025-06-27 | All apps | release | — | Version 5.1.0 adds experimental built-in Tor (Android first). | github.com |
| 2025-05-15 | All apps | release | — | Version 4.28.0 adds Payjoin v2 for Bitcoin. | github.com |
| 2025-03-22 | All apps | network change | — | Version 4.24.0 removes Haven and adds Decred. | github.com |
| 2024-12-18 | All apps | release | — | Version 4.22.0 adds Monero on Ledger and prepares the removal of Haven after the Haven project shut down. | forum.cakewallet.com |
| 2024-11-16 | Cupcake | release | — | First release of Cupcake, Cake's air-gapped signing app. | github.com |
| 2024-10-21 | All apps | release | — | Version 4.20.0 adds Litecoin MWEB, wallet groups and ERC-20 scam-token detection. | github.com |
| 2024-05-29 | All apps | release | — | Version 4.18.0 adds Bitcoin Silent Payments. | github.com |
| 2024-05-21 | Old weak Bitcoin wallets | hack | — | Milk Sad researchers later report (October 2024) that from 21 May 2024 the larger outgoing transactions from the 8,757 known weak Cake Wallet Bitcoin wallets were mostly malicious. | git.distrust.co |
| 2024-05-19 | Bitcoin wallets | vulnerability | — | Milk Sad researchers publish a technical write-up of the 2021 Cake Wallet weak-seed issue. | git.distrust.co |
| 2023-12-18 | Bitcoin wallets | fix | — | Using a list from the Milk Sad researchers, Cake Wallet adds detection of about 8,700 known weak 2020–2021 Bitcoin wallets; version 4.12.0 (December 2023) warns affected users in the app. | git.distrust.co |
| 2023-12-05 | All apps | release | — | Version 4.11.0 adds Polyseed, the 16-word Monero seed that stores its creation date. | github.com |
| 2023-08-07 | All apps | release | — | Version 4.8.0 adds Ethereum. | github.com |
| 2023-05-11 | Linux | release | — | First Linux release (beta). | github.com |
| 2023-03-06 | All apps | release | — | Version 4.6.0 adds Tor-only options for the fiat price API and exchanges. | github.com |
| 2022-08-04 | Cake Pay | release | — | Cake Pay launches for buying gift cards with crypto. | github.com |
| 2022-01-08 | Monero.com app | release | — | Cake launches the separate Monero.com app. | github.com |
| 2021-05-11 | All apps | release | — | Version 4.2.0 adds Litecoin. | github.com |
| 2021-05-10 | Bitcoin wallets | vulnerability | — | Version 4.1.7 changes how Bitcoin seeds are generated. Earlier 12-word Electrum-style Bitcoin seeds created by Cake Wallet used a weak random number generator; Cake disclosed the problem on Reddit on 11 May 2021 and told users to move funds to new wallets. Monero wallets were not affected. | github.com |
| 2021-02-02 | All apps | release | — | Version 4.1.0 adds Bitcoin on iOS and Android. | github.com |
| 2020-08-26 | Cake Wallet team | scam campaign | — | Cake developers publicly expose, on Reddit's r/Monero, a social-engineering attempt in which a person claimed 128 XMR in missing payments using a modified wallet pointed at Monero Classic nodes. No losses were reported. | criptonoticias.com; reddit.com |
| 2018-01 | iOS | release | — | Cake Wallet launches on iOS as a Monero-only wallet (month as reported by Bitcoin Magazine). | bitcoinmagazine.com |
How to protect yourself
Install Cake Wallet only from the official app stores, cakewallet.com (typed in yourself) or the official GitHub releases, and check links with our download checker; never type your seed into a website or give it to "support" (Cake never messages you first); keep your seed and restore height backed up offline; and move funds out of any Bitcoin wallet Cake Wallet created in 2020–2021. See fake Cake Wallet apps and is Cake Wallet safe?
Methodology and citation
Entries come from Cake Wallet's own announcements, release notes and source code, security researchers' reports, security researchers and reputable news coverage; each row names its source. Loss figures are as reported at the time. Journalists and researchers may cite this page; please link to it. The data is free to download on our press page. Corrections are welcome.