# Is Cake Wallet safe to connect? | TradingAgentStack

> Cake Wallet: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-24.

Canonical: https://tradingagentstack.com/check/cake-wallet/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Cake Wallet

# Is Cake Wallet safe to connect?

Privacy wallet · Monero, Zcash, Bitcoin, Litecoin, Ethereum, Solana, Tron, others. Checked 2026-10-24; every line links its source.

**Worst case:** Cake is self-custody, so a leaked seed or a malicious 'Cake' build (for example a file pushed through a hacked Telegram account) can empty every coin in the app. Coins swapped through a centralized provider such as ChangeNOW or Trocador sit with that provider until it pays out or refunds.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Install only from App Store id1334702542, Google Play com.cakewallet.cake_wallet, Accrescent, fdroid.cakelabs.com or github.com/cake-tech/cake_wallet/releases. Verify Android APKs against the published signing-certificate hash (C5:40:53:AB:…:6E:F5) with apksigner or AppVerifier.

2. Never install a file or 'update' sent over Telegram, even from a known staff name. Get support only through the in-app Support option, support@cakewallet.com or @cakewallet_bot.

3. Write the seed on paper offline, and test a small swap first. Note the Trade ID and provider so support can chase a stuck or refunded swap.

## What it can do with your money

| Who holds the keys | You hold the keys Non-custodial: 'Open source & non-custodial means you have complete control over your private keys'. Zcash wallets use a 12-word BIP39 seed by default (24 words and a passphrase optional). Cake 'never holds the funds' during swaps. [source](https://docs.cakewallet.com/faq/swaps-and-exchanges.md) |
| --- | --- |
| Can funds be sent out to any address? | Yes. Self-custody sends to any address. [source](https://cakewallet.com) |
| Swaps and third parties | Every swap runs through a third-party provider. Centralized providers receive your deposit and send the swapped coin: ChangeNOW, Exolix, Trocador (aggregator), SwapTrade, LetsExchange (aggregator), XOSwap, Swaps.xyz. Decentralized routes: Chainflip, NEAR Intents, Jupiter. Refunds come from the provider that received the deposit. Cake can't reverse a completed swap, but its support escalates with the provider using your Trade ID. [source](https://docs.cakewallet.com/support/swap.md) |
| Monero and Zcash | **XMR**: send/receive/swap **ZEC**: send/receive/swap; shielded (Ironwood) by default with autoshielding of transparent funds; Ironwood support since 6.4.0 **Shielded ZEC withdrawals**: yes [source](https://docs.cakewallet.com/cryptos/zcash.md) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `cakewallet.com`

- Website: `docs.cakewallet.com`

- Website: `monero.com`

- Telegram: `@cakewallet_bot`

- X: `@cakewallet`

- GitHub: `github.com/cake-tech/cake_wallet`

- App: `https://apps.apple.com/us/app/cake-wallet/id1334702542`

- App: `https://play.google.com/store/apps/details?id=com.cakewallet.cake_wallet`

Where we confirmed these
- https://beta.getmonero.org/downloads/community/ (links cakewallet.com and Monero.com by Cake Labs at monero.com)

- https://cakewallet.com (links App Store id1334702542, Google Play com.cakewallet.cake_wallet, github.com/cake-tech/cake_wallet, x.com/cakewallet, t.me/cakewallet_bot)

- https://github.com/cake-tech (org links cakewallet.com, docs.cakewallet.com and X @cakewallet)

- https://raw.githubusercontent.com/cake-tech/cake_wallet/dev/README.md (App Store id1334702542, Google Play com.cakewallet.cake_wallet, fdroid.cakelabs.com, monero.com)

- https://docs.cakewallet.com/support/support.md (Telegram support bot t.me/cakewallet_bot, support@cakewallet.com)

- https://docs.cakewallet.com/tutorials/what-to-do-if-scammed.md (official channels: cakewallet.com, monero.com, support@cakewallet.com, Telegram @cakewallet community, @cakewallet_bot support)

## Deadlines

- **2026-11-05**: Zcash NU7 activates at mainnet block 3,543,405 (2026-11-05 is an estimate). Version 4 transactions become invalid and ZEC left in the Sprout pool becomes unspendable. Per ZIP 2003, zcashd was the only maintained software with Sprout wallet functionality, so Cake can't rescue Sprout funds. Update the app before activation. [source](https://zips.z.cash/zip-0259)

- ****: Zano support will be removed in a future Cake Wallet release (no date announced). Back up your Zano seed and be ready to restore it in another Zano wallet. [source](https://docs.cakewallet.com/cryptos/zano.md)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2026-10-24 | Alleged Bitcoin RBF (replace-by-fee) issue in Cake Wallet, reported on X. Not confirmed: we could not read the post or find corroboration. Cake's 6.5.0 notes (Oct 2026) include 'Fixed a send you had backed out of being able to replace a newer one on the confirmation screen', but nothing links that fix to this report. (reported by users) |  | unconfirmed | [source](https://x.com/1440000bytes/status/2113930464344129724) |
| 2026-09-24 | Reported on X: a Cake Wallet staff Telegram account was hacked and used to push malware. Not confirmed in Cake's docs or other sources we could read. Treat any download link sent in Telegram DMs or groups as hostile. (reported by users) |  | unconfirmed | [source](https://x.com/OrangeFren/status/2103112296063176923) |
| 2026-06-02 | Zcash-wide emergency: a flaw in the Orchard proof circuit led to Orchard transactions being suspended, then re-enabled by NU6.2. Affects every Zcash wallet. |  | Zcash Foundation: no evidence of exploitation; user funds not affected | [source](https://cointelegraph.com/news/zcash-orchard-vulnerability-emergency-upgrade) |
| 2025-06-26 | Bitcoin Silent Payments scanning broke after Cake Wallet 5.0.1, so most users of the feature could not see incoming Silent Payments |  | Cake said funds were not at risk; fix promised in 5.1 or a point release | [source](https://www.criptonoticias.com/tecnologia/silent-payments-se-quiebran-cake-wallet/) |
| undated | Dropping Zano: since 6.5.0 (Oct 2026) new Zano wallets can't be created or restored, and Zano 'will be removed from Cake Wallet in a future release' (no date). Wownero support was already removed (date not given). |  | existing Zano wallets still work for now; back up the seed | [source](https://docs.cakewallet.com/cryptos/zano.md) |

## Check a link

Got a link, @handle or repo that claims to be Cake Wallet? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Cake Wallet

We email you if we add an incident, a freeze report, a known fake or a deadline for Cake Wallet. Free; unsubscribe anytime.

## More checks: Zcash and Monero wallets
[Zodl (formerly Zashi)](https://tradingagentstack.com/check/zodl/)[Ywallet](https://tradingagentstack.com/check/ywallet/)[Unstoppable Wallet](https://tradingagentstack.com/check/unstoppable-wallet/)[Feather Wallet](https://tradingagentstack.com/check/feather-wallet/)[Monero GUI / CLI (official)](https://tradingagentstack.com/check/monero-gui-cli/)[Stack Wallet](https://tradingagentstack.com/check/stack-wallet/)[Edge Wallet](https://tradingagentstack.com/check/edge-wallet/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)