Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

What the evidence shows

Technical and product details

1. Primal

   Primal's pinned Android and iOS UI says users fully control bitcoin, have sole custody through the recovery phrase, and now hold the keys. The source-visible pinned application and UI code contained no unilateral-exit or recovery-bundle flow. 12345618

   Supporting material shown on this page

   Primal AndroidRepository record · github.com · checked 2026-07-14

   Primal Android control claimPinned source code · github.com · checked 2026-07-14

   1380    <string name="wallet_notice_upgrade_description_second">With one tap, we\'ll move your funds and full\ntransaction history to your new non-custodial\nwallet - so you fully control your bitcoin.\nQuestions? Check out our </string>
   1381    <string name="wallet_notice_upgrade_faqs">FAQs</string>

   Primal Android custody claimsPinned source code · github.com · checked 2026-07-14

   1574    <string name="wallet_backup_disclaimer_part_one">Primal does not have access to the funds in your wallet. You have sole custody of your wallet via the recovery phrase. If you lose your recovery phrase, </string>
   1575    <string name="wallet_backup_disclaimer_part_two">Primal will not be able to restore your funds.</string>
   1576    <string name="wallet_backup_button_i_understand">I understand, backup wallet</string>
   1577    <string name="wallet_backup_button_cancel">Cancel, I\'ll do this later</string>
   1578    <string name="wallet_backup_seed_description_one">This is your wallet recovery phrase. To backup your wallet, simply write these words down in the correct order.</string>

   Primal iOSRepository record · github.com · checked 2026-07-14

   Primal iOS backup claimPinned source code · github.com · checked 2026-07-14

   36            .font: UIFont.appFont(withSize: 18, weight: .bold),
   37            .foregroundColor: UIColor.foreground,
   38            .paragraphStyle: paragraphStyle,
   39            .underlineStyle: NSUnderlineStyle.single.rawValue
   40        ])
   41        secondText.append(.init(string: " Primal does not have access to the funds in your wallet. You have sole custody of your wallet via the recovery phrase. If you lose your recovery phrase, ", attributes: [
   42            .font: UIFont.appFont(withSize: 18, weight: .regular),

   Primal iOS confirmation claimPinned source code · github.com · checked 2026-07-14

   24        let label = UILabel("Your wallet has been backed up. You now hold the keys to your bitcoin! Please confirm the three points below.", color: .foreground, font: .appFont(withSize: 18, weight: .regular), multiline: true)
   25        
   26        let checkViews = [
   27            BackupWalletCheckView(text: "My funds are not held by Primal"),
   28            BackupWalletCheckView(text: "If my device gets lost or stolen, the only way to recover my funds is via the wallet recovery phrase"),
   29            BackupWalletCheckView(text: "It is my sole responsibility to keep my recovery phrase safe")
   30        ]

   consumer-wallet exit audit manifestReproducible audit manifest · Review of Spark's trust model · checked 2026-07-14
2. Radar

   Radar says it never holds the money and that no one can freeze or seize it but the user. Its recovery UI says the seed can restore the balance in Cake or another Spark wallet. Both pinned apps used Breez 0.18.0, and neither application's source-visible integration or UI contained the complete exit flow. 7891011121318

   Supporting material shown on this page

   Radar AndroidRepository record · github.com · checked 2026-07-14

   Radar Android Breez versionPinned source code · github.com · checked 2026-07-14

   191breezsdk = "breez_sdk_spark:bindings-android:0.18.0"

   Radar iOSRepository record · github.com · checked 2026-07-14

   Radar control claimPinned source code · github.com · checked 2026-07-14

   15Radar is built on Signal's trusted messaging network, so the people you already talk to come with you. No rebuilding your network. No new account necessary.
   16
   17### Private by default, yours by design
   18
   19• End-to-end encrypted — built on Signal's battle-tested protocol for encryption you can actually trust.  
   20• Self-custodial — your keys, your coins. Radar never holds your money; no one can freeze, seize, or lose it but you.  
   21• Instant Bitcoin payments over the Lightning Network, settled in seconds.  

   Radar recovery languagePinned source code · github.com · checked 2026-07-14

   8332/* Title of confirmation alert when discarding recovery phrase. */
   8333"SETTINGS_PAYMENTS_PASSPHRASE_DISCARD_CONFIRMATION_TITLE" = "Continue Without Saving?";
   8334
   8335/* Explanation of the 'payments passphrase' in the 'view payments passphrase' settings. */
   8336"SETTINGS_PAYMENTS_PASSPHRASE_EXPLANATION" = "Your seed phrase isn't required to keep your funds safe — Radar handles recovery automatically. Saving it gives you extra peace of mind and lets you restore your balance in Cake Wallet or any other Spark-compatible wallet.";

   Radar iOS Breez versionPinned source code · github.com · checked 2026-07-14

   5  "description": "Local wrapper around the upstream 0.18.0 tag. The upstream BreezSdkSpark.podspec is frozen at spec.version = 0.11.0-dev2 since the 0.11.0 tag, which forces CocoaPods to pull a mismatched FFI binary. This podspec depends on our locally vendored breez_sdk_sparkFFI = 0.18.0 instead. R
   6  "homepage": "https://breez.technology",
   7  "documentation_url": "https://sdk-doc-spark.breez.technology",
   8  "license": { "type": "MIT" },
   9  "authors": { "Breez": "contact@breez.technology" },
   10  "platforms": { "ios": "13.0" },
   11  "source": {

   Radar App StoreWeb source · apps.apple.com · checked 2026-07-14

   consumer-wallet exit audit manifestReproducible audit manifest · Review of Spark's trust model · checked 2026-07-14
3. Wallet of Satoshi

   Its disclosure says users retain full authority over private keys and describes unilateral exit as a permissionless alternative with longer processing and higher costs. Wallet of Satoshi publishes neither its mobile-app source nor a complete consumer unilateral-exit procedure. 1415

   Supporting material shown on this page

   Wallet of Satoshi disclosureWeb source · walletofsatoshi.com · checked 2026-07-14

   Wallet of Satoshi Play listingWeb source · play.google.com · checked 2026-07-14
4. Bringin

   Bringin says every v2 wallet ships with pre-signed exits and can leave Spark without Bringin's cooperation. Its mobile app is closed source, its public GitHub organization does not contain that app, and its launch material provides no operational exit procedure. 1617

   Supporting material shown on this page

   Bringin v2 launchBlog or announcement · bringin.app · checked 2026-07-14

   Bringin public GitHub organizationRepository record · github.com · checked 2026-07-14

Scope control

What this does not establish

• These are dated claim-to-demonstrated-product comparisons. Seed restoration while Spark services remain available is distinct from outage recovery. Open-source absence findings are limited to the pinned commits and audit terms. Primal iOS pins an opaque compiled PrimalShared.xcframework, so that result is not a full transitive-binary audit. The Radar iOS archive likewise omits the Breez FFI binary and Pods submodule, so its result is limited to the source-visible integration and UI. Wallet of Satoshi and Bringin findings are limited to public claims, source availability, and published instructions. They do not prove that private or later implementations are impossible. 181416

Sources and excerpts

Primary sources

The relevant details and available source-code excerpts appear alongside the claims above. This list preserves the complete original-source trail for independent verification.