BlueWallet's chief technology officer screened 904 iOS apps in the App Store labeled as non-custodial crypto wallets, analyzed 494 of them in depth, and flagged 45 as carrying serious or high-risk security issues — 23 rated as potentially severe and 22 as high risk.
The flaws described are the kind that defeat the entire point of a non-custodial wallet. Some apps were found to upload users' mnemonic seed phrases or private keys to a server, which turns a supposedly self-custodial wallet into a custodial one without telling the user. Others generated wallets with insufficient randomness, a flaw that can make private keys guessable rather than cryptographically secure. The review also flagged apps storing keys server-side, apps using hardcoded encryption keys baked directly into the app's code, and apps loading unsigned JavaScript capable of interacting with sensitive wallet data after installation — a vector that could let an app's behavior change after Apple's own review process has already approved it.
Each of these issues individually undermines the core promise of self-custody: that the user, and only the user, controls the keys to their funds. A wallet that phones a seed phrase home to a server has effectively made itself a custodian while marketing itself as the opposite, and a user who chose that app specifically to avoid trusting a third party has no way of knowing the substitution happened. Weak randomness in key generation is arguably worse, since it can be exploited silently and at scale by anyone who works out the pattern, long after the affected users have already funded their wallets.
The reviewer was careful to caveat the findings: the analysis may contain false positives, and apps that didn't make the flagged list are not automatically safe just because they weren't singled out. That distinction matters for how the results should be read. This is a screen of publicly available App Store listings, not a full security audit of any individual app's codebase, and the difference between “not flagged” and “verified safe” is significant for anyone using the list to make a decision about where to hold funds.
Related: FBI May Have Identified First-Wave Attacker in $116M Coldcard Theft
The review lands at a moment when wallet security has already had a rough stretch. A firmware bug in Coldcard hardware wallets enabled a $116 million theft earlier this year, and separate incidents have hit iToken wallet users and SafePal's order data in recent months — a run of incidents spanning both hardware and software wallets that has made wallet-layer security a recurring theme rather than an isolated story. A systematic screen of nearly a thousand iOS apps claiming to be non-custodial adds a broader, App Store-wide data point to that pattern: the problem isn't confined to a handful of high-profile products, it may be structural to how loosely “non-custodial” gets defined and enforced across the App Store's crypto wallet category.
Apple's review process checks for things like malware, crash stability and policy compliance, but it was never designed to verify cryptographic implementation details like randomness sources or whether a wallet's claimed non-custodial architecture actually holds up under inspection. That gap is what let 45 apps carrying serious flaws sit on the App Store passing Apple's own review, available for download next to fully legitimate wallets with no obvious way for an ordinary user to tell them apart. Until app stores build in some form of wallet-specific security vetting, independent reviews like this one remain one of the only ways users get a warning before choosing where to put their keys — sitting alongside other recent wallet-security scares like the Coldcard firmware bug and the SafePal order-data breach.
FAQ
How many iOS crypto wallet apps were reviewed?
BlueWallet's CTO screened 904 apps labeled as non-custodial wallets on the App Store and analyzed 494 of them in detail.
What kinds of security flaws were found?
Issues included seed phrases or private keys uploaded to servers, weak randomness in wallet generation, server-side key storage, hardcoded encryption keys, and unsigned JavaScript capable of accessing sensitive wallet data.
Does an app not being flagged mean it's safe?
No. The reviewer explicitly cautioned that the analysis can contain false positives and that apps absent from the flagged list aren't automatically verified as secure.
Is this the same as a full security audit?
No, it's a screen of publicly listed App Store apps rather than a code-level audit of any individual wallet, so it should be treated as a warning signal rather than a certification either way.
