{
 "source": "https://cakewalletapp.at/cake-wallet-security-history/",
 "license": "CC BY 4.0",
 "entries": [
  {
   "date": "2026-10-12",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "network",
   "loss_usd": "",
   "summary": "Version 6.5.0 adds Robinhood Chain and Bitcoin accounts and starts phasing out Zano.",
   "source": "docs.cakewallet.com"
  },
  {
   "date": "2026-10-06",
   "wallet": "Lightning",
   "wallet_slug": "",
   "type": "other",
   "loss_usd": "",
   "summary": "Review site WalletScrutiny relabels Cake Wallet 'custodial' because the optional Lightning balance relies on Spark operators co-signing withdrawals and the app does not offer the unilateral exit; the label concerns the Lightning balance, not the on-chain wallets. Cake describes its Lightning as self-custodial.",
   "source": "walletscrutiny.com"
  },
  {
   "date": "2026-09-18",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "other",
   "loss_usd": "",
   "summary": "Cake creates a new release-signing key (dated 18 September 2026 in its verification guide) for signed checksums and tags; older tags are unsigned.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2026-09-04",
   "wallet": "EVM wallets",
   "wallet_slug": "",
   "type": "vulnerability",
   "loss_usd": "None reported",
   "summary": "Advisory GHSA-695v-fhpj-fv8x (moderate): payment requests could be sent on the wrong EVM network because the chain ID was dropped. It affected versions 6.1.2–6.3.0 and was fixed in 6.4.4.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2026-06-05",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 6.2.0 adds Trezor support for Monero.",
   "source": "docs.cakewallet.com"
  },
  {
   "date": "2026-02-25",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 6.0.0: full redesign and Bitcoin Lightning.",
   "source": "docs.cakewallet.com"
  },
  {
   "date": "2026-01-30",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "network",
   "loss_usd": "",
   "summary": "A user report on version 5.8.0 shows Wownero wallets can no longer be created or restored; existing ones open only to show seeds and keys. The exact version that removed Wownero is not documented.",
   "source": "forum.cakewallet.com"
  },
  {
   "date": "2026-01-12",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "network",
   "loss_usd": "",
   "summary": "Version 5.7.0 adds Zcash.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2025-10-15",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 5.5.0 adds Trezor and BitBox hardware wallets and Base.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2025-06-27",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 5.1.0 adds experimental built-in Tor (Android first).",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2025-05-15",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.28.0 adds Payjoin v2 for Bitcoin.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2025-03-22",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "network",
   "loss_usd": "",
   "summary": "Version 4.24.0 removes Haven and adds Decred.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2024-12-18",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.22.0 adds Monero on Ledger and prepares the removal of Haven after the Haven project shut down.",
   "source": "forum.cakewallet.com"
  },
  {
   "date": "2024-11-16",
   "wallet": "Cupcake",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "First release of Cupcake, Cake's air-gapped signing app.",
   "source": "github.com/cake-tech/cupcake"
  },
  {
   "date": "2024-10-21",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.20.0 adds Litecoin MWEB, wallet groups and ERC-20 scam-token detection.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2024-05-29",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.18.0 adds Bitcoin Silent Payments.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2024-05-21",
   "wallet": "Old weak Bitcoin wallets",
   "wallet_slug": "",
   "type": "hack",
   "loss_usd": "Not quantified (about 548.9 BTC moved through weak wallets 2020–2024, not all stolen)",
   "summary": "Milk Sad researchers later report (October 2024) that from 21 May 2024 the larger outgoing transactions from the 8,757 known weak Cake Wallet Bitcoin wallets were mostly malicious.",
   "source": "git.distrust.co"
  },
  {
   "date": "2024-05-19",
   "wallet": "Bitcoin wallets",
   "wallet_slug": "",
   "type": "vulnerability",
   "loss_usd": "",
   "summary": "Milk Sad researchers publish a technical write-up of the 2021 Cake Wallet weak-seed issue.",
   "source": "git.distrust.co"
  },
  {
   "date": "2023-12-18",
   "wallet": "Bitcoin wallets",
   "wallet_slug": "",
   "type": "fix",
   "loss_usd": "",
   "summary": "Using a list from the Milk Sad researchers, Cake Wallet adds detection of about 8,700 known weak 2020–2021 Bitcoin wallets; version 4.12.0 (December 2023) warns affected users in the app.",
   "source": "git.distrust.co"
  },
  {
   "date": "2023-12-05",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.11.0 adds Polyseed, the 16-word Monero seed that stores its creation date.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2023-08-07",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.8.0 adds Ethereum.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2023-05-11",
   "wallet": "Linux",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "First Linux release (beta).",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2023-03-06",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.6.0 adds Tor-only options for the fiat price API and exchanges.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2022-08-04",
   "wallet": "Cake Pay",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Cake Pay launches for buying gift cards with crypto.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2022-01-08",
   "wallet": "Monero.com app",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Cake launches the separate Monero.com app.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2021-05-11",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.2.0 adds Litecoin.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2021-05-10",
   "wallet": "Bitcoin wallets",
   "wallet_slug": "",
   "type": "vulnerability",
   "loss_usd": "Not disclosed",
   "summary": "Version 4.1.7 changes how Bitcoin seeds are generated. Earlier 12-word Electrum-style Bitcoin seeds created by Cake Wallet used a weak random number generator; Cake disclosed the problem on Reddit on 11 May 2021 and told users to move funds to new wallets. Monero wallets were not affected.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2021-02-02",
   "wallet": "All apps",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Version 4.1.0 adds Bitcoin on iOS and Android.",
   "source": "github.com/cake-tech/cake_wallet"
  },
  {
   "date": "2020-08-26",
   "wallet": "Cake Wallet team",
   "wallet_slug": "",
   "type": "scam",
   "loss_usd": "None reported",
   "summary": "Cake developers publicly expose, on Reddit's r/Monero, a social-engineering attempt in which a person claimed 128 XMR in missing payments using a modified wallet pointed at Monero Classic nodes. No losses were reported.",
   "source": "criptonoticias.com; reddit.com"
  },
  {
   "date": "2018-01",
   "wallet": "iOS",
   "wallet_slug": "",
   "type": "release",
   "loss_usd": "",
   "summary": "Cake Wallet launches on iOS as a Monero-only wallet (month as reported by Bitcoin Magazine).",
   "source": "bitcoinmagazine.com"
  }
 ]
}