Corrections

September 11, 2026

Wallet audit refresh: Twelve primary products were freshly reviewed, including Stacker News after its source removed the administrator-only restriction. Club Orange 4.3.7 replaces 4.3.3; Blitz’s export is in stable 0.7.15; Cake, Primal Android and Agicash SDK upgrades are credited. Current Breez sweep construction and progress checking are distinguished from application broadcasting and persistence. The new wallet grid separates scoped No-flow findings from unverified closed-source and directory entries.

Final consistency review: the operator matrix now includes the incoming counter-transfer claim required to complete the reviewed optimization swap. Recovery completion is distinguished from an optional later sweep; the older checklist is retained with that clarification. The historical case-study wallet count now agrees with the eleven-product survey.

The full 61-record source audit has been incorporated: operator indices are SO0 Lightspark, SO1 Breez, SO2 Flashnet; all-participant preparation is distinguished from the signing threshold; Flashnet’s current terms no longer support the old fund-freezing claim; historical SSP policy is dated; wallet survey counts and APK provenance dates are repaired; the Flashnet TypeScript dependency is cited directly; retained-key and cloud-sync claims state their additional prerequisites. Historical experiments are not presented as newly reproduced. Existing finding URLs remain stable.

The practical exit assessment now incorporates the successful 38-to-10-leaf mainnet optimization, its backup and fee-funding workarounds, excluded principal and measured timelocks. The earlier case study is explicitly historical: later inspection found its five selected leaves recovered as 72,370 sats. The subsequent optimized exit remains a separate, pending experiment at its recorded checkpoint. No mainnet operator outage is claimed.

August 24, 2026

Wallet implementation review: The review was refreshed at current public source heads, expanded from eight to eleven primary products, and given a separate comparison section for preview, restricted, merchant, and unimplemented candidates. Blink's canonical search result was corrected from zero to three matches on three lines in two files; those lines expressly describe unilateral-exit flows the app never starts, so the product conclusion is unchanged. Club Orange was refreshed from APK 4.1.8 to 4.3.3.

E03 and E05: Breez 0.23 added public mobile exit construction, durable SQLite tree storage, and state export/import. The publication now credits those capabilities and narrows the product finding to the missing wallet-operated broadcast and recovery workflow and to wallets pinned to older SDKs.

E12: Breez 0.23 includes the SplitLocked ancestry state omitted in 0.19.0. The record is now explicitly historical rather than a current-SDK defect.

Standing limits

• No proved destination allowlist.
• No proved sanctions-to-Spark production wiring path.
• No evidence that the wallet gate has been activated against a production wallet.
• No claim that protocol-level unilateral exit is technically impossible.
• No claim about unseen closed-source wallet code.