Original material

Sources

170 distinct source links are cited by the analyses on this site. Multiple line-specific citations may point to the same underlying document.

Web source

Radar App Store

apps.apple.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Blog or announcement

Blink Weekly Brief

blink.sv · Supports Blink’s Weekly Brief described seed-only recovery and an unswept amount as received

Open original source

Web source

Cake's Lightning article

blog.cakewallet.com · Supports Cake describes a one-transaction exit, but its reviewed shipped integration did not expose an exit flow

Open original source

Blog or announcement

Bringin launch

bringin.app · Supports No complete in-app operatorless exit was found in eight reviewed consumer-wallet products, Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Official documentation

Global Accounts on Spark

docs.lightspark.com · Supports Grid’s common account model permits a Spark-backed wallet to carry a frozen status that blocks payments

Open original source

Official documentation

current unilateral-exit manual

docs.spark.money · Supports Spark’s FAQ reduces exit to a pre-signed broadcast; its beta manual documents a multi-stage expert procedure, The documented independent exit cannot start from a Spark balance alone; it needs external on-chain fee funding

Open original source

Official documentation

Spark addressing

docs.spark.money · Supports Sparkscan exposes the hidden Spark identity behind Lightning payments

Open original source

Official documentation

Spark FAQ

docs.spark.money · Supports Despite an announced Breez SSP, both reviewed SDKs still default only to Lightspark, Flashnet—one of three named Spark Operators—reserves compliance-based rejection and fund freezing in its service terms, Spark’s FAQ reduces exit to a pre-signed broadcast; its beta manual documents a multi-stage expert procedure

Open original source

Official documentation

Spark privacy mode

docs.spark.money · Supports Sparkscan exposes the hidden Spark identity behind Lightning payments, Spark privacy does not cover a globally enumerable token ledger

Open original source

Official documentation

Spark sovereignty page

docs.spark.money · Supports Spark’s FAQ reduces exit to a pre-signed broadcast; its beta manual documents a multi-stage expert procedure

Open original source

Official documentation

Spark trust model

docs.spark.money · Supports Spark's forward security rests on an act of key deletion users cannot verify, Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Official documentation

Sparkscan transaction API

docs.sparkscan.io · Supports Sparkscan exposes the hidden Spark identity behind Lightning payments

Open original source

Blog or announcement

Flashnet build relationship

flashnet.xyz · Supports Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Web source

Flashnet Terms, access restrictions

flashnet.xyz · Supports Flashnet—one of three named Spark Operators—reserves compliance-based rejection and fund freezing in its service terms

Open original source

Repository record

4.1.8 APK

github.com · Supports Club Orange bundled lower-level exit code without exposing an app-facing exit operation

Open original source

Pinned source code

all-Operator consensus selection

github.com · Supports Every Spark Operator receives transfer participants and records—not merely a signing share

Open original source

Pinned source code

all-Operator leaf synchronization

github.com · Supports A normal Spark wallet identifies itself separately to every Operator

Open original source

Pinned source code

all-Operator outgoing Lightning request

github.com · Supports Every Spark Operator receives the full Lightning invoice—not merely one secret share

Open original source

Pinned source code

all-Operator preimage-share fan-out

github.com · Supports Every Spark Operator receives the full Lightning invoice—not merely one secret share

Open original source

Pinned source code

all-Operator transfer persistence

github.com · Supports Every Spark Operator receives transfer participants and records—not merely a signing share

Open original source

Repository record

Android 0.7.13-pre6

github.com · Supports Blitz’s ‘no third parties’ recovery tool uses Spark’s cooperative-withdrawal path

Open original source

Pinned source code

archive gossip fields

github.com · Supports Rotating a Spark deposit address leaves the Operator-side wallet cluster intact

Open original source

Pinned source code

authz.go

github.com · Supports Spark makes a targeted wallet freeze externally indistinguishable from an ordinary identity error

Open original source

Pinned source code

Blink case study

github.com · Supports Spark’s FAQ reduces exit to a pre-signed broadcast; its beta manual documents a multi-stage expert procedure, One 100,000-sat wallet required 253 ordered packages; 252 failed when submitted together, At 1 sat/vB, 18 of 22 leaves cost more to exit than they held, Blink’s first documented mainnet recovery bundle silently omitted required ancestry, Cake describes a one-transaction exit, but its reviewed shipped integration did not expose an exit flow

Open original source

Pinned source code

Blink confirm-and-continue loop

github.com · Supports A Spark unilateral exit is a staged recovery procedure, not a single emergency broadcast

Open original source

Pinned source code

Blink consolidation takeaway

github.com · Supports Wallet usage history—not just balance—determines Spark’s exit workload

Open original source

Pinned source code

Blink economics takeaway

github.com · Supports Higher fee rates push more Spark leaves below the economic exit threshold

Open original source

Pinned source code

Blink exit accounting

github.com · Supports A Spark destination amount does not disclose the exit’s net economic recovery, Blink’s Weekly Brief described seed-only recovery and an unswept amount as received

Open original source

Pinned source code

Blink fee-funding mechanics

github.com · Supports A Spark destination amount does not disclose the exit’s net economic recovery

Open original source

Pinned source code

Blink fee-rate sensitivity

github.com · Supports Higher fee rates push more Spark leaves below the economic exit threshold

Open original source

Pinned source code

Blink leaf economics

github.com · Supports A Spark destination amount does not disclose the exit’s net economic recovery, Higher fee rates push more Spark leaves below the economic exit threshold

Open original source

Repository record

Blink mobile

github.com · Supports No complete in-app operatorless exit was found in eight reviewed consumer-wallet products

Open original source

Pinned source code

Blink mobile integration plan

github.com · Supports Spark exit backups must track wallet mutations; a one-time seed backup cannot stay current, The documented independent exit cannot start from a Spark balance alone; it needs external on-chain fee funding

Open original source

Pinned source code

Blink parallelism mechanics

github.com · Supports A Spark unilateral exit is a staged recovery procedure, not a single emergency broadcast

Open original source

Pinned source code

Blink recovery-bundle requirement

github.com · Supports A seed alone is not an operator-outage recovery backup for Spark, Blink’s Weekly Brief described seed-only recovery and an unswept amount as received

Open original source

Pinned source code

Blink seed-derived operations

github.com · Supports A seed alone is not an operator-outage recovery backup for Spark

Open original source

Pinned source code

Blink timelock and sweep stages

github.com · Supports A Spark unilateral exit is a staged recovery procedure, not a single emergency broadcast, Blink’s Weekly Brief described seed-only recovery and an unswept amount as received

Open original source

Pinned source code

Blink TRUC sequencing

github.com · Supports Wallet usage history—not just balance—determines Spark’s exit workload

Open original source

Pinned source code

Blink wallet-tree mechanics

github.com · Supports Wallet usage history—not just balance—determines Spark’s exit workload

Open original source

Repository record

Blitz

github.com · Supports No complete in-app operatorless exit was found in eight reviewed consumer-wallet products

Open original source

Repository record

Blitz PR 999

github.com · Supports Blitz’s ‘no third parties’ recovery tool uses Spark’s cooperative-withdrawal path

Open original source

Repository record

Blitz recovery tool

github.com · Supports Blitz’s ‘no third parties’ recovery tool uses Spark’s cooperative-withdrawal path

Open original source

Pinned source code

BOLT 11 invoice fields

github.com · Supports Every Spark Operator receives the full Lightning invoice—not merely one secret share

Open original source

Pinned source code

Breez cooperative-exit SSP flow

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

Pinned source code

Breez coordinator pool

github.com · Supports Both reviewed SDKs fix Lightspark SO0 as default coordinator without automatic failover

Open original source

Repository record

Breez fix PR 917

github.com · Supports Blink’s first documented mainnet recovery bundle silently omitted required ancestry

Open original source

Pinned source code

Breez Lightning SSP flow

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

Repository record

Breez releases

github.com · Supports Breez 0.19.0 ships no public mobile exit API; its draft API still contacts an operator

Open original source

Pinned source code

Breez SSP configuration

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible, Despite an announced Breez SSP, both reviewed SDKs still default only to Lightspark

Open original source

Pinned source code

Breez unilateral-exit source

github.com · Supports Breez 0.19.0 can silently omit a required parent and produce an unbroadcastable exit package

Open original source

Repository record

Bringin public GitHub organization

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Repository record

Cake

github.com · Supports No complete in-app operatorless exit was found in eight reviewed consumer-wallet products, Cake describes a one-transaction exit, but its reviewed shipped integration did not expose an exit flow

Open original source

Pinned source code

Cake Breez dependency

github.com · Supports Cake describes a one-transaction exit, but its reviewed shipped integration did not expose an exit flow

Open original source

Pinned source code

client transfer-key tweak

github.com · Supports Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Pinned source code

client-IP extraction

github.com · Supports A normal Spark wallet identifies itself separately to every Operator

Open original source

Repository record

Club Orange releases

github.com · Supports No complete in-app operatorless exit was found in eight reviewed consumer-wallet products, Club Orange bundled lower-level exit code without exposing an app-facing exit operation

Open original source

Pinned source code

ComplianceProvider

github.com · Supports Lightspark Connect exposes Chainalysis-backed sanctions screening of Lightning nodes

Open original source

Pinned source code

conditional Operator initialization

github.com · Supports When enabled, Spark’s targeted wallet gate can be updated live, applied selectively, and reversed

Open original source

Pinned source code

conditional request-logger activation

github.com · Supports A normal Spark wallet identifies itself separately to every Operator

Open original source

Pinned source code

cooperative exit gate

github.com · Supports Spark applies its wallet gate across exits, deposits, claims, and privileged-service paths

Open original source

Pinned source code

counterparty-privacy test

github.com · Supports One public participant is enough to expose the full Spark transfer

Open original source

Pinned source code

current unilateral-exit service

github.com · Supports Breez 0.19.0 ships no public mobile exit API; its draft API still contacts an operator

Open original source

Pinned source code

default cooperative-exit flow

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

Pinned source code

default Lightning SSP flow

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

Pinned source code

default mainnet SSP and coordinator

github.com · Supports Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity, Spark's published 2-of-3 setting means one honest Operator cannot veto two retained shares, Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Pinned source code

default topology and coordinator

github.com · Supports Both reviewed SDKs fix Lightspark SO0 as default coordinator without automatic failover

Open original source

Pinned source code

deposit-tree creation gate

github.com · Supports Spark applies its wallet gate across exits, deposits, claims, and privileged-service paths

Open original source

Pinned source code

DKG minimum signers

github.com · Supports Spark's published 2-of-3 setting means one honest Operator cannot veto two retained shares

Open original source

Pinned source code

documented SSP rejection point

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

Pinned source code

empty-filter read-only client

github.com · Supports Spark privacy does not cover a globally enumerable token ledger

Open original source

Pinned source code

ephemeral secret-storage design

github.com · Supports Spark's forward security rests on an act of key deletion users cannot verify

Open original source

Repository record

fix PR 935

github.com · Supports Breez 0.19.0 can silently omit a required parent and produce an unbroadcastable exit package

Open original source

Pinned source code

fixed SSP identity

github.com · Supports One public participant is enough to expose the full Spark transfer, Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity, Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Pinned source code

global token query path

github.com · Supports Spark privacy does not cover a globally enumerable token ledger

Open original source

Pinned source code

Grid MSA section 2.1

github.com · Supports Lightspark’s Grid contract expressly permits sanctions-based refusal, reversal, and freezing

Open original source

Pinned source code

Grid MSA section 2.5

github.com · Supports Grid’s contract puts compliance judgment, transaction execution, and suspension in Lightspark’s hands

Open original source

Pinned source code

Grid Rewards Spark-wallet flow

github.com · Supports Lightspark says Grid integrates sanctions checks into transactions and blocks illicit transfers by default

Open original source

Pinned source code

identity-bound request context

github.com · Supports A normal Spark wallet identifies itself separately to every Operator

Open original source

Pinned source code

identity-grouped static-address query

github.com · Supports Rotating a Spark deposit address leaves the Operator-side wallet cluster intact

Open original source

Pinned source code

immutable address-to-identity records

github.com · Supports Rotating a Spark deposit address leaves the Operator-side wallet cluster intact

Open original source

Pinned source code

indistinguishability test

github.com · Supports Spark makes a targeted wallet freeze externally indistinguishable from an ordinary identity error

Open original source

Pinned source code

InternalAccount

github.com · Supports Grid’s common account model permits a Spark-backed wallet to carry a frozen status that blocks payments

Open original source

Pinned source code

InternalAccountStatus

github.com · Supports Grid’s common account model permits a Spark-backed wallet to carry a frozen status that blocks payments

Open original source

Pinned source code

InternalAccountType

github.com · Supports Grid’s common account model permits a Spark-backed wallet to carry a frozen status that blocks payments

Open original source

Repository record

issue 374

github.com · Supports Breez 0.19.0 ships no public mobile exit API; its draft API still contacts an operator, Cake describes a one-transaction exit, but its reviewed shipped integration did not expose an exit flow

Open original source

Pinned source code

JavaScript coordinator lookup

github.com · Supports Both reviewed SDKs fix Lightspark SO0 as default coordinator without automatic failover

Open original source

Pinned source code

killswitch.go

github.com · Supports Spark makes a targeted wallet freeze externally indistinguishable from an ordinary identity error

Open original source

Pinned source code

knob definition

github.com · Supports Spark Operator code includes a wallet-identity kill switch for state-changing actions

Open original source

Pinned source code

leaf-renewal gate

github.com · Supports Spark applies its wallet gate across exits, deposits, claims, and privileged-service paths

Open original source

Pinned source code

legacy transfer fan-out

github.com · Supports Every Spark Operator receives transfer participants and records—not merely a signing share

Open original source

Pinned source code

Lightning transfer to fixed SSP

github.com · Supports One public participant is enough to expose the full Spark transfer

Open original source

Pinned source code

Lightspark-only SSP interface

github.com · Supports Spark gives Lightspark's SSP explicit cross-wallet privacy-bypass paths

Open original source

Pinned source code

live ConfigMap watcher

github.com · Supports When enabled, Spark’s targeted wallet gate can be updated live, applied selectively, and reversed

Open original source

Pinned source code

multi-participant privacy rule

github.com · Supports One public participant is enough to expose the full Spark transfer

Open original source

Pinned source code

normal leaf query

github.com · Supports Breez’s default mobile persistence does not retain the tree needed for an outage exit

Open original source

Pinned source code

old-version deletion logic

github.com · Supports Spark's forward security rests on an act of key deletion users cannot verify

Open original source

Pinned source code

one-plus-threshold signing construction

github.com · Supports Spark's published 2-of-3 setting means one honest Operator cannot veto two retained shares, Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Pinned source code

Operator identity authentication

github.com · Supports Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity

Open original source

Pinned source code

Operator share rotation

github.com · Supports Spark's forward security rests on an act of key deletion users cannot verify

Open original source

Pinned source code

ordinary deposit-address gate

github.com · Supports Spark applies its wallet gate across exits, deposits, claims, and privileged-service paths

Open original source

Code commit

origin commit

github.com · Supports Spark Operator code includes a wallet-identity kill switch for state-changing actions

Open original source

Pinned source code

outgoing request fields

github.com · Supports Every Spark Operator receives the full Lightning invoice—not merely one secret share

Open original source

Pinned source code

participant-side transfer creation

github.com · Supports Every Spark Operator receives transfer participants and records—not merely a signing share

Open original source

Pinned source code

per-Operator identity authentication

github.com · Supports A normal Spark wallet identifies itself separately to every Operator

Open original source

Pinned source code

preimage-share consensus handler

github.com · Supports Spark’s preimage-share consensus path enforces the wallet gate for SSP and LNURL callers

Open original source

Repository record

Primal Android

github.com · Supports No complete in-app operatorless exit was found in eight reviewed consumer-wallet products, Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Pinned source code

Primal Android control claim

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Pinned source code

Primal Android custody claims

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Repository record

Primal iOS

Open original source

Pinned source code

Primal iOS backup claim

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Pinned source code

Primal iOS confirmation claim

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Pinned source code

privileged-broadcaster invariant

github.com · Supports Spark applies its wallet gate across exits, deposits, claims, and privileged-service paths

Open original source

Pinned source code

protobuf redaction list

github.com · Supports A normal Spark wallet identifies itself separately to every Operator

Open original source

Pinned source code

public read-only client and balance query

github.com · Supports A public-mode Spark identity exposes exact holdings and raw Bitcoin transaction material

Open original source

Pinned source code

public SSP schema

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

Pinned source code

public transfer fields

github.com · Supports One public participant is enough to expose the full Spark transfer

Open original source

Repository record

pull request 795

github.com · Supports Breez 0.19.0 ships no public mobile exit API; its draft API still contacts an operator

Open original source

Repository record

Radar Android

Open original source

Pinned source code

Radar Android Breez version

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Pinned source code

Radar control claim

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Repository record

Radar iOS

Open original source

Pinned source code

Radar iOS Breez version

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Pinned source code

Radar recovery language

github.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Pinned source code

receiver-side transfer comment and gate

github.com · Supports Spark Operator code can stop a pending SSP-funded incoming transfer before wallet credit

Open original source

Pinned source code

reference SSP-funded Lightning receive

github.com · Supports Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Referenced non-public implementation

referenced non-public implementation

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

Pinned source code

request and client-metadata logger

github.com · Supports A normal Spark wallet identifies itself separately to every Operator

Open original source

Pinned source code

returned node fields

github.com · Supports A public-mode Spark identity exposes exact holdings and raw Bitcoin transaction material

Open original source

Pinned source code

screenNode

github.com · Supports Lightspark Connect exposes Chainalysis-backed sanctions screening of Lightning nodes

Open original source

Pinned source code

section 2.8(h)

github.com · Supports Lightspark’s Grid contract expressly permits sanctions-based refusal, reversal, and freezing

Open original source

Pinned source code

server share update and invariant verifying key

github.com · Supports Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Pinned source code

Spark CLI unilateralexit implementation

github.com · Supports Spark’s mainnet CLI generates packages but leaves signing, ordered broadcast, timelocks, and sweeping to the user

Open original source

Pinned source code

Spark package constructor

github.com · Supports The documented independent exit cannot start from a Spark balance alone; it needs external on-chain fee funding

Open original source

Pinned source code

Spark renewal status

github.com · Supports Breez 0.19.0 can silently omit a required parent and produce an unbroadcastable exit package

Open original source

Pinned source code

Spark SSP configuration

github.com · Supports Despite an announced Breez SSP, both reviewed SDKs still default only to Lightspark

Open original source

Pinned source code

Sparkcore SSP instructions

github.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

Pinned source code

SQLite backend

github.com · Supports Breez’s default mobile persistence does not retain the tree needed for an outage exit

Open original source

Pinned source code

SSP cooperative-exit input

github.com · Supports Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity

Open original source

Pinned source code

SSP cooperative-exit record

github.com · Supports Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity

Open original source

Pinned source code

SSP identity authentication

github.com · Supports Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity

Open original source

Pinned source code

SSP Lightning-invoice record

github.com · Supports Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity

Open original source

Pinned source code

SSP node-query privacy bypass

github.com · Supports Spark gives Lightspark's SSP explicit cross-wallet privacy-bypass paths, A public-mode Spark identity exposes exact holdings and raw Bitcoin transaction material

Open original source

Pinned source code

SSP transfer privacy bypass

github.com · Supports Spark gives Lightspark's SSP explicit cross-wallet privacy-bypass paths

Open original source

Pinned source code

SSP wallet identity and request history

github.com · Supports Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity

Open original source

Pinned source code

static deposit-address gate

github.com · Supports Spark applies its wallet gate across exits, deposits, claims, and privileged-service paths

Open original source

Code commit

static-address bypass commit

github.com · Supports Spark gives Lightspark's SSP explicit cross-wallet privacy-bypass paths

Open original source

Pinned source code

static-address rotation and identity

github.com · Supports Rotating a Spark deposit address leaves the Operator-side wallet cluster intact

Open original source

Pinned source code

static-address rotation gate

github.com · Supports Spark applies its wallet gate across exits, deposits, claims, and privileged-service paths

Open original source

Pinned source code

stored invoice and wallet identity

github.com · Supports Every Spark Operator receives the full Lightning invoice—not merely one secret share

Open original source

Pinned source code

targeting and reversal test

github.com · Supports When enabled, Spark’s targeted wallet gate can be updated live, applied selectively, and reversed

Open original source

Pinned source code

token output fields

github.com · Supports Spark privacy does not cover a globally enumerable token ledger

Open original source

Pinned source code

transfer-claim gate

github.com · Supports Spark applies its wallet gate across exits, deposits, claims, and privileged-service paths

Open original source

Pinned source code

unauthenticated read policy

github.com · Supports A public-mode Spark identity exposes exact holdings and raw Bitcoin transaction material

Open original source

Pinned source code

unauthenticated token policy

github.com · Supports Spark privacy does not cover a globally enumerable token ledger

Open original source

Pinned source code

wallet constructs the SSP client

github.com · Supports Lightspark's default SSP binds invoices and Bitcoin destinations to the Operator-layer wallet identity

Open original source

Pinned source code

wallet initialization

github.com · Supports A normal Spark wallet identifies itself separately to every Operator

Open original source

Pinned source code

wallet preimage-share request

github.com · Supports Every Spark Operator receives the full Lightning invoice—not merely one secret share

Open original source

Pinned source code

WalletBuilder fallback

github.com · Supports Breez’s default mobile persistence does not retain the tree needed for an outage exit

Open original source

Blog or announcement

Breez SSP announcement

lightspark.com · Supports Despite an announced Breez SSP, both reviewed SDKs still default only to Lightspark

Open original source

Web source

Lightspark on-demand platforms

lightspark.com · Supports Lightspark says it handles sanctions screening for account products built on Spark wallets

Open original source

Web source

Lightspark sanctions explainer

lightspark.com · Supports Lightspark says Grid integrates sanctions checks into transactions and blocks illicit transfers by default

Open original source

Blog or announcement

Lightspark's open-source statement

lightspark.com · Supports The referenced server logic for Spark’s default Lightspark SSP is not publicly accessible

Open original source

On-chain transaction

Blink funding transaction

mempool.space · Supports The documented independent exit cannot start from a Spark balance alone; it needs external on-chain fee funding

Open original source

Web source

Wallet of Satoshi Play listing

play.google.com · Supports Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Reproducible audit manifest

consumer-wallet exit audit manifest

Review of Spark's trust model · Supports No complete in-app operatorless exit was found in eight reviewed consumer-wallet products, Club Orange bundled lower-level exit code without exposing an app-facing exit operation, Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Reproducible audit manifest

sanitized mainnet observation

Review of Spark's trust model · Supports Sparkscan exposes the hidden Spark identity behind Lightning payments, One public participant is enough to expose the full Spark transfer, Spark privacy does not cover a globally enumerable token ledger

Open original source

Web source

Spark statechain key-deletion analysis

spark.money · Supports Spark's forward security rests on an act of key deletion users cannot verify, Spark's published 2-of-3 setting means one honest Operator cannot veto two retained shares

Open original source

Web source

published Lightspark-Flashnet advisory role

static1.squarespace.com · Supports Retained Lightspark and Flashnet keys could sign a conflicting spend of a Lightspark-funded Lightning leaf

Open original source

Web source

Wallet of Satoshi disclosure

walletofsatoshi.com · Supports No complete in-app operatorless exit was found in eight reviewed consumer-wallet products, Across Primal, Radar, Wallet of Satoshi, and Bringin, control claims were not matched by a demonstrated unilateral-exit path

Open original source

Archived web source

archived official Lightspark Chainalysis guide

web.archive.org · Supports Lightspark Connect exposes Chainalysis-backed sanctions screening of Lightning nodes

Open original source