Review of Spark's trust model

Unilateral-exit readiness

Club Orange's reviewed app bundled exit primitives but exposed no app-facing exit operation

Club Orange's published 4.1.8 Android artifact bundled Breez Spark's lower-level unilateral-exit primitives, but its 46 exported BreezSdk method names contained no unilateral-exit or recovery operation and the targeted DEX search found no corresponding user-flow strings. 123

3 sourcesEvidence reviewed through July 14, 2026

What the evidence shows

Technical and product details

  1. Published artifact

    Club Orange's public 4.1.8 Android release includes a downloadable APK and release metadata suitable for an independent binary review. 12

    Supporting material shown on this page

    4.1.8 releaseRepository record · github.com · checked 2026-07-14
    4.1.8 APKRepository record · github.com · checked 2026-07-14
  2. Exported interface

    The native UniFFI library exposes 46 BreezSdk method symbols. None of their names contains unilateral, exit, or recovery. 3

    Supporting material shown on this page

  3. User-flow strings

    An exact search across all five DEX files found no unilateral-exit, recovery-bundle, or prepare-unilateral user-flow string. 3

    Supporting material shown on this page

  4. Lower-level capability

    The bundled native library does contain Breez Spark's lower-level unilateral-exit primitives. Their presence establishes SDK capability but does not expose an application workflow by itself. 23

    Supporting material shown on this page

    4.1.8 APKRepository record · github.com · checked 2026-07-14
  5. Artifact identity

    The published 4.1.8 APK is 321,875,805 bytes with GitHub-reported SHA-256 2b362ffbf25169123a4f3addcdd3c8ce3d9763b81bbb558ea5c91891cfdf9b41. 123

    Supporting material shown on this page

    4.1.8 releaseRepository record · github.com · checked 2026-07-14
    4.1.8 APKRepository record · github.com · checked 2026-07-14

Product-level detail

What the published Club Orange application exposed

The conclusions below are reproduced here so the reader does not need to open the separate implementation review. Each result remains limited to the named source snapshot, published binary, or public product surface.

Club Orange

Surface reviewed: published android apk

No unilateral-exit, exit, or recovery operation appears in the 46 exported BreezSdk method names, and the targeted DEX search found no corresponding user-flow strings. The bundled native library nevertheless contains lower-level unilateral-exit primitives.

Capabilities that were present: the bundled native library contains lower-level unilateral-exit primitives.

Symbol and string searches cannot prove the absence of obfuscated or indirectly invoked private code.

See versions, search method, artifact hashes, and full review limits.

Scope control

What this does not establish

  • Symbol and string searches cannot prove that no obfuscated or indirectly invoked code exists. The result is limited to the named published artifact and the recorded interface and string searches. 3

Sources and excerpts

Primary sources

The relevant details and available source-code excerpts appear alongside the claims above. This list preserves the complete original-source trail for independent verification.

1

4.1.8 release

Repository record · github.com · Live source · checked 2026-07-14

Open original source
3

consumer-wallet exit audit manifest

Reproducible audit manifest · Review of Spark's trust model · Pinned or archival · checked 2026-07-14

Open original source

How sources, absence findings, and limitations were evaluated