# Is Ywallet safe? Check before you connect

> Ywallet: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-24.

Canonical: https://tradingagentstack.com/check/ywallet/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Ywallet

# Is Ywallet safe to connect?

Privacy wallet · Zcash, Ycash. Checked 2026-10-24; every line links its source.

**Worst case:** Ywallet is deprecated: its last release (2026-06-04) lists no Ironwood or NU7 support, so after these upgrades it may be unable to send your ZEC until you restore your seed in a maintained wallet. Anyone who gets your seed can take your funds.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Don't start using Ywallet for new funds. If you already use it, back up the seed phrase offline now and plan to restore it in a maintained Zcash wallet (the author points to Zkool).

2. If you install or update it, use only the links on ywallet.app/installation or the github.com/hhanh00/zwallet releases page. Never enter your seed on a website.

3. Before NU7 (block 3,543,405, around 2026-11-05), test a small send. If it fails, restore the seed in a maintained wallet rather than trying third-party 'recovery' tools.

## What it can do with your money

| Who holds the keys | You hold the keys Light wallet. Accounts are created or restored on your device from a seed phrase (ZIP 32) or keys, with watch-only and cold-signing options. No account on a server. [source](https://github.com/hhanh00/zwallet) |
| --- | --- |
| Can funds be sent out to any address? | Yes. You sign sends yourself. Sending after network upgrades depends on the app supporting them (see deadlines). [source](https://github.com/hhanh00/zwallet) |
| Swaps and third parties | Built-in swaps and voting were removed in v1.14.1 (2025-11-27), so the app no longer sends funds through a swap provider. [source](https://github.com/hhanh00/zwallet/releases) |
| Monero and Zcash | **XMR**: not supported **ZEC**: send/receive, transparent and shielded; release notes list no Ironwood (NU6.3) or NU7 support [source](https://github.com/hhanh00/zwallet/releases) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `ywallet.app`

- GitHub: `github.com/hhanh00/zwallet`

- App: `https://apps.apple.com/us/app/ywallet/id1583859229`

Where we confirmed these
- https://ywallet.app/installation (links github.com/hhanh00/zwallet releases, App Store id1583859229, Google Play me.hanh.ywallet, Flathub app.ywallet.Ywallet)

- https://github.com/hhanh00/zwallet README (website ywallet.app)

- https://apps.apple.com/us/app/ywallet/id1583859229 (developer Ycash Foundation; privacy policy and changelog on ywallet.app)

## Deadlines

- **2026-11-05**: Zcash NU7 activates at mainnet block 3,543,405 (2026-11-05 is an estimate; activation is by block height). Version 4 transactions become invalid, transactions must commit to the new consensus branch, and ZEC left in the Sprout pool becomes unspendable. Ywallet's latest release (v1.15.3, 2026-06-04) mentions neither NU6.3 Ironwood (live since 2026-07-28) nor NU7. Per ZIP 2003, zcashd was the only maintained software with Sprout wallet functionality. [source](https://zips.z.cash/zip-0259)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2026-06-02 | Zcash-wide emergency: a flaw in the Orchard proof circuit led to Orchard transactions being suspended, then re-enabled by NU6.2. Ywallet v1.15.3 (2026-06-04) then fixed its 'NU6.2 circuit version detection'. |  | Zcash Foundation: no evidence of exploitation; patched in v1.15.3 | [source](https://github.com/hhanh00/zwallet/releases) |
| 2026-05-24 | Wallet deprecated: v1.14.3 added an in-app deprecation notice. The README says no further updates except security fixes and protocol updates, and points users to Zkool. |  | still works per author ('your coins are safe'); feature development ended | [source](https://github.com/hhanh00/zwallet) |

## Check a link

Got a link, @handle or repo that claims to be Ywallet? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Ywallet

We email you if we add an incident, a freeze report, a known fake or a deadline for Ywallet. Free; unsubscribe anytime.

## More checks: Zcash and Monero wallets
[Zodl (formerly Zashi)](https://tradingagentstack.com/check/zodl/)[Unstoppable Wallet](https://tradingagentstack.com/check/unstoppable-wallet/)[Cake Wallet](https://tradingagentstack.com/check/cake-wallet/)[Feather Wallet](https://tradingagentstack.com/check/feather-wallet/)[Monero GUI / CLI (official)](https://tradingagentstack.com/check/monero-gui-cli/)[Stack Wallet](https://tradingagentstack.com/check/stack-wallet/)[Edge Wallet](https://tradingagentstack.com/check/edge-wallet/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)