Is Cake Wallet safe to connect?
Privacy wallet · Monero, Zcash, Bitcoin, Litecoin, Ethereum, Solana, Tron, others. Checked 2026-10-24; every line links its source.
Worst case: Cake is self-custody, so a leaked seed or a malicious 'Cake' build (for example a file pushed through a hacked Telegram account) can empty every coin in the app. Coins swapped through a centralized provider such as ChangeNOW or Trocador sit with that provider until it pays out or refunds.
Safe setup in 3 steps
- Install only from App Store id1334702542, Google Play com.cakewallet.cake_wallet, Accrescent, fdroid.cakelabs.com or github.com/cake-tech/cake_wallet/releases. Verify Android APKs against the published signing-certificate hash (C5:40:53:AB:…:6E:F5) with apksigner or AppVerifier.
- Never install a file or 'update' sent over Telegram, even from a known staff name. Get support only through the in-app Support option, support@cakewallet.com or @cakewallet_bot.
- Write the seed on paper offline, and test a small swap first. Note the Trade ID and provider so support can chase a stuck or refunded swap.
What it can do with your money
| Who holds the keys | You hold the keys Non-custodial: 'Open source & non-custodial means you have complete control over your private keys'. Zcash wallets use a 12-word BIP39 seed by default (24 words and a passphrase optional). Cake 'never holds the funds' during swaps. source |
|---|---|
| Can funds be sent out to any address? | Yes. Self-custody sends to any address. source |
| Swaps and third parties | Every swap runs through a third-party provider. Centralized providers receive your deposit and send the swapped coin: ChangeNOW, Exolix, Trocador (aggregator), SwapTrade, LetsExchange (aggregator), XOSwap, Swaps.xyz. Decentralized routes: Chainflip, NEAR Intents, Jupiter. Refunds come from the provider that received the deposit. Cake can't reverse a completed swap, but its support escalates with the provider using your Trade ID. source |
| Monero and Zcash | XMR: send/receive/swap ZEC: send/receive/swap; shielded (Ironwood) by default with autoshielding of transparent funds; Ironwood support since 6.4.0 Shielded ZEC withdrawals: yes source |
Official links
- Website:
cakewallet.com - Website:
docs.cakewallet.com - Website:
monero.com - Telegram:
@cakewallet_bot - X:
@cakewallet - GitHub:
github.com/cake-tech/cake_wallet - App:
https://apps.apple.com/us/app/cake-wallet/id1334702542 - App:
https://play.google.com/store/apps/details?id=com.cakewallet.cake_wallet
Where we confirmed these
Deadlines
- 2026-11-05: Zcash NU7 activates at mainnet block 3,543,405 (2026-11-05 is an estimate). Version 4 transactions become invalid and ZEC left in the Sprout pool becomes unspendable. Per ZIP 2003, zcashd was the only maintained software with Sprout wallet functionality, so Cake can't rescue Sprout funds. Update the app before activation. source
- : Zano support will be removed in a future Cake Wallet release (no date announced). Back up your Zano seed and be ready to restore it in another Zano wallet. source
Incidents
| Date | What happened | Amount | Outcome | Source |
|---|---|---|---|---|
| 2026-10-24 | Alleged Bitcoin RBF (replace-by-fee) issue in Cake Wallet, reported on X. Not confirmed: we could not read the post or find corroboration. Cake's 6.5.0 notes (Oct 2026) include 'Fixed a send you had backed out of being able to replace a newer one on the confirmation screen', but nothing links that fix to this report. | unconfirmed | source | |
| 2026-09-24 | Reported on X: a Cake Wallet staff Telegram account was hacked and used to push malware. Not confirmed in Cake's docs or other sources we could read. Treat any download link sent in Telegram DMs or groups as hostile. | unconfirmed | source | |
| 2026-06-02 | Zcash-wide emergency: a flaw in the Orchard proof circuit led to Orchard transactions being suspended, then re-enabled by NU6.2. Affects every Zcash wallet. | Zcash Foundation: no evidence of exploitation; user funds not affected | source | |
| 2025-06-26 | Bitcoin Silent Payments scanning broke after Cake Wallet 5.0.1, so most users of the feature could not see incoming Silent Payments | Cake said funds were not at risk; fix promised in 5.1 or a point release | source | |
| undated | Dropping Zano: since 6.5.0 (Oct 2026) new Zano wallets can't be created or restored, and Zano 'will be removed from Cake Wallet in a future release' (no date). Wownero support was already removed (date not given). | existing Zano wallets still work for now; back up the seed | source |