钱包级二维码（bittool-signer-wallet v1）

ur:bytescanonical CBORanimatedversion 1

钱包级二维码通过一次扫描导出一个 BitTool Signer 钱包的全部账户：四个 Bitcoin 账户（每种单签地址类型一个）、EVM 和 TRON 账户，以及三个 Solana 预设地址。它在 App 中的位置是 Connect › Wallet Level。

编码

pairing object (text keys, see below)
  → canonical CBOR (RFC 8949 §4.2.1)                     "inner", 1561 bytes for the test wallet
  → CBOR byte string containing those bytes               "outer"
  → UR type "bytes"  (BCR-2020-006)
  → multi-part UR, 400-byte fragments, upper-case         4 frames for the test wallet

有四个细节需要注意：

两层 CBOR。UR 正文是一个 CBOR 字节串，配对 map 位于其中。先解码外层得到字节，再解码这些字节。它不是 JSON，不是 tag-24 数据项，也不是自定义的 ur:bittool-… 类型。
文本键。map 的键是 JSON 字段名，以 CBOR 文本串表示，因此 CBOR 与下方的 JSON 视图是同一份数据。
规范编码。使用定长编码和最短的整数形式，map 的键按其编码后的字节排序（对于文本键：较短的键在前，长度相同时按字节序）。只会出现文本、无符号整数、数组和 map；缺省的字段直接省略。
始终为动态二维码。分片大小为 400 字节，且不超过载荷的一半，因此至少总有两帧。BitTool Signer 拒绝超过 4,096 字节的载荷。你的扫描器必须收齐所有帧（顺序任意）后再解码。

规范键顺序示例：对象 {version: 1, mode: "full", b: "x", aa: 2} 编码为

a4 61 62 61 78   62 61 61 02   64 6d6f6465 64 66756c6c   67 76657273696f6e 01
   "b"  "x"        "aa"  2       "mode"      "full"         "version"        1

配对对象

外层字段

字段	类型	值
`protocol`	text	`"bittool-signer-wallet"`
`version`	uint	`1`。拒绝任何其他版本；绝不能把更高版本当作 v1 读取。
`mode`	text	`"full"`。BitTool Signer 只生成 `full`。
`network`	text	`"mainnet"`
`masterFingerprint`	text	BIP32 主密钥指纹，8 位小写十六进制数
`accounts`	array	7 个条目，见下文。按 `chain` 和 `script`/`profile` 查找，绝不要按位置查找。

账户

`chain`	字段	说明
`btc`（×4）	`accountPath`、`script`、`xpub`、`derive: {receive: "0/", change: "1/"}`	每种 `script` 一个：`p2wpkh`（`m/84'/0'/0'`）、`p2tr`（`m/86'/0'/0'`）、`p2sh-p2wpkh`（`m/49'/0'/0'`）、`p2pkh`（`m/44'/0'/0'`）
`evm`	`accountPath` `m/44'/60'/0'`、`xpub`、`derive: "0/*"`	所有 EVM 网络共用一个账户
`tron`	`accountPath` `m/44'/195'/0'`、`xpub`、`derive: "0/*"`
`sol`	`profile: "bip44-solana"`、`accounts: [{index, profile, path, address}]`	三个条目：`standard` `m/44'/501'/0'/0'`、`trust` `m/44'/501'/0'`、`legacy` `m/44'/501'`

每个 xpub 都使用标准的主网版本字节 0x0488B21E，SegWit 和 Taproot 也不例外：决定派生哪种地址的是 script 字段，而不是 ypub/zpub 前缀。其中不包含多签（BIP48）共同签名方的密钥；多签钱包需要所有共同签名方的密钥和门限，因此请改用币种级共同签名方导出。

测试向量

来自公开测试助记词 abandon … about，不带 passphrase。将扫描器对准下面的动画，或者使用下方的帧。

钱包级配对二维码（测试钱包）4 帧 · 1,561 字节载荷 · 与 App 中一样循环播放

UR:BYTES/1-4/LPADAACFAMCECYJYHYKIWKHKADLTHKAMCFOLIEJNJLIEIHIEIYKPJZJZIOJTIHJYKTJLJPJEIOJNHSINJTJTIHJYIOKOIHJPJKINJLJTADISHSIAIAJLKPJTJYJKLTONIEKSJOKPIDKSJLKSJOKPIDENFXHSJYHGIEINHTINJLIEJNGOIHGHFYJOETGSGHECJLJPETJTJNIDGRGLIAKPKKKOKNEMHGKKJEJKHFFGJEGRFWEEGMFDKTFXFYEOHDKKKPKOGDFEIDKOJSFPGYHKEOJPFPGDJKISHGIAGTGSJLGDEYIYGTFGGTGRFDGDGEEEHTIHHTHDHKHFGOISGSKOEHHFGTJPIMGDFXEMGDHGENHFIHIAISHSINJTIAIDJYIAIYIEIHJPINKOIHOEIYIAISHSJTIOIHIAEHDLDRIOJPIHIAIHINKOIHIADYDLDRIYJKIAJPINJOJYIYJOEYKTJOJEISJEHSIAIAJLKPJTJYGDHSJYISJEJNDLETEEDIDLDYDIDLDYDIONIEKSJOKPIDKSJLKSJOKPIDENFWIOFWIOJKIHJKJOHGKOFEGMFGEOGSFDGYKPENFXJTJSIEKOIYFEKOJYGTIAGYIMHKJPIAGMKNKSECEOGYGEIMGUKSHSJPIMEYHSIYHKHGIAGSJYIHJLFLHFJEKKEMFYEOGOGRFYGDESGYKKJPGSJOJPGYEOHFFXFEFXJLHKEEESKKIYIEFYFEFDFLFXJYGTGTIMESEYJOGMIHGOJKGYIHIAISHSINJTIAIDJYIAIYIEIHJPINKOIHOEIYIAISHSJTIOIHUYSWLYTA

1 / 4

配对对象（内层 CBOR 的 JSON 视图）
{
  "protocol": "bittool-signer-wallet",
  "version": 1,
  "mode": "full",
  "network": "mainnet",
  "masterFingerprint": "73c5da0a",
  "accounts": [
    {
      "chain": "btc",
      "accountPath": "m/84'/0'/0'",
      "script": "p2wpkh",
      "xpub": "xpub6CatWdiZiodmUeTDp8LT5or8nmbKNcuyvz7WyksVFkKB4RHwCD3XyuvPEbvqAQY3rAPshWcMLoP2fMFMKHPJ4ZeZXYVUhLv1VMrjPC7PW6V",
      "derive": {
        "receive": "0/*",
        "change": "1/*"
      }
    },
    {
      "chain": "btc",
      "accountPath": "m/86'/0'/0'",
      "script": "p2tr",
      "xpub": "xpub6BgBgsespWvERF3LHQu6CnqdvfEvtMcQjYrcRzx53QJjSxarj2afYWcLteoGVky7D3UKDP9QyrLprQ3VCECoY49yfdDEHGCtMMj92pReUsQ",
      "derive": {
        "receive": "0/*",
        "change": "1/*"
      }
    },
    {
      "chain": "btc",
      "accountPath": "m/49'/0'/0'",
      "script": "p2sh-p2wpkh",
      "xpub": "xpub6C6nQwHaWbSrzs5tZ1q7m5R9cPK9eYpNMFesiXsYrgc1P8bvLLAet9JfHjYXKjToD8cBRswJXXbbFpXgwsswVPAZzKMa1jUp2kVkGVUaJa7",
      "derive": {
        "receive": "0/*",
        "change": "1/*"
      }
    },
    {
      "chain": "btc",
      "accountPath": "m/44'/0'/0'",
      "script": "p2pkh",
      "xpub": "xpub6BosfCnifzxcFwrSzQiqu2DBVTshkCXacvNsWGYJVVhhawA7d4R5WSWGFNbi8Aw6ZRc1brxMyWMzG3DSSSSoekkudhUd9yLb6qx39T9nMdj",
      "derive": {
        "receive": "0/*",
        "change": "1/*"
      }
    },
    {
      "chain": "evm",
      "accountPath": "m/44'/60'/0'",
      "xpub": "xpub6DCoCpSuQZB2jawqnGMEPS63ePKWkwWPH4TU45Q7LPXWuNd8TMtVxRrgjtEshuqpK3mdhaWHPFsBngh5GFZaM6si3yZdUsT8ddYM3PwnATt",
      "derive": "0/*"
    },
    {
      "chain": "tron",
      "accountPath": "m/44'/195'/0'",
      "xpub": "xpub6D1AabNHCupeiLM65ZR9UStMhJ1vCpyV4XbZdyhMZBiJXALQtmn9p42VTQckoHVn8WNqS7dqnJokZHAHcHGoaQgmv8D45oNUKx6DZMNZBCd",
      "derive": "0/*"
    },
    {
      "chain": "sol",
      "profile": "bip44-solana",
      "accounts": [
        {
          "index": 0,
          "profile": "standard",
          "path": "m/44'/501'/0'/0'",
          "address": "HAgk14JpMQLgt6rVgv7cBQFJWFto5Dqxi472uT3DKpqk"
        },
        {
          "index": 1,
          "profile": "trust",
          "path": "m/44'/501'/0'",
          "address": "GjJyeC1r2RgkuoCWMyPYkCWSGSGLcz266EaAkLA27AhL"
        },
        {
          "index": 2,
          "profile": "legacy",
          "path": "m/44'/501'",
          "address": "D2PPQSYFe83nDzk96FqGumVU8JA7J8vj2Rhjc2oXzEi5"
        }
      ]
    }
  ]
}

二维码帧（ur:bytes，共 4 部分）

帧
UR:BYTES/1-4/LPADAACFAMCECYJYHYKIWKHKADLTHKAMCFOLIEJNJLIEIHIEIYKPJZJZIOJTIHJYKTJLJPJEIOJNHSINJTJTIHJYIOKOIHJPJKINJLJTADISHSIAIAJLKPJTJYJKLTONIEKSJOKPIDKSJLKSJOKPIDENFXHSJYHGIEINHTINJLIEJNGOIHGHFYJOETGSGHECJLJPETJTJNIDGRGLIAKPKKKOKNEMHGKKJEJKHFFGJEGRFWEEGMFDKTFXFYEOHDKKKPKOGDFEIDKOJSFPGYHKEOJPFPGDJKISHGIAGTGSJLGDEYIYGTFGGTGRFDGDGEEEHTIHHTHDHKHFGOISGSKOEHHFGTJPIMGDFXEMGDHGENHFIHIAISHSINJTIAIDJYIAIYIEIHJPINKOIHOEIYIAISHSJTIOIHIAEHDLDRIOJPIHIAIHINKOIHIADYDLDRIYJKIAJPINJOJYIYJOEYKTJOJEISJEHSIAIAJLKPJTJYGDHSJYISJEJNDLETEEDIDLDYDIDLDYDIONIEKSJOKPIDKSJLKSJOKPIDENFWIOFWIOJKIHJKJOHGKOFEGMFGEOGSFDGYKPENFXJTJSIEKOIYFEKOJYGTIAGYIMHKJPIAGMKNKSECEOGYGEIMGUKSHSJPIMEYHSIYHKHGIAGSJYIHJLFLHFJEKKEMFYEOGOGRFYGDESGYKKJPGSJOJPGYEOHFFXFEFXJLHKEEESKKIYIEFYFEFDFLFXJYGTGTIMESEYJOGMIHGOJKGYIHIAISHSINJTIAIDJYIAIYIEIHJPINKOIHOEIYIAISHSJTIOIHUYSWLYTA
UR:BYTES/2-4/LPAOAACFAMCECYJYHYKIWKHKADLTIAEHDLDRIOJPIHIAIHINKOIHIADYDLDRIYJKIAJPINJOJYIEJOEYJYJPJEHSIAIAJLKPJTJYGDHSJYISJEJNDLETENDIDLDYDIDLDYDIONIEKSJOKPIDKSJLKSJOKPIDENFXENJTGYKTFDHSHGIDGUJPKNJKECJYHTEHJSEMJNECGMESIAGDGRESIHHKJOGLGTFGIHJKINHDJKHKJPIOIAEHGDETIDKOGSGSFPIHJYESGEIYFDIMHKHDGRIMGHJLFYETIAFWGMJKKTGEHDHDIDIDFGJOHDIOKTJKJKKTHFGDFPHTKNGRGTHSEHIMGOJOEYJEHFJEFLHFGOHSGEHSEMIHIAISHSINJTIAIDJYIAIYIEIHJPINKOIHOEIYIAISHSJTIOIHIAEHDLDRIOJPIHIAIHINKOIHIADYDLDRIYJKIAJPINJOJYJEJOEYJKISDPJOEYKTJOJEISJEHSIAIAJLKPJTJYGDHSJYISJEJNDLEEESDIDLDYDIDLDYDIONIEKSJOKPIDKSJLKSJOKPIDENFWJLJKIYFXJTINIYKNKSIAFGKTJPGUKNGYINJSKPEYFYFWHFGHJKISJEFXHDHSIAKOGLJKHGFLHKGEHFHFISISHSKTFPEMIEEEGMECHGGUHGFLFGGLIDINETFPKTENHTGMIAEHIDJPKSGTKKHGGTKNFLEOFYGUGUGUGUJLIHJEJEKPIEISGOIEESKKGSIDENJSKSEOESGHESJTGTIEIMIHIAISHSINJTIAIDJYIAIYIEIHJPINKOIHBZSSDEKE
UR:BYTES/3-4/LPAXAACFAMCECYJYHYKIWKHKADLTOEIYIAISHSJTIOIHIAEHDLDRIOJPIHIAIHINKOIHIADYDLDRIYJKIAJPINJOJYIHJOEYJOJEISJEHSIAIAJLKPJTJYGDHSJYISJEJNDLEEEEDIDLDYDIDLDYDIOXIEKSJOKPIDKSJLKSJOKPIDENFYFXJLFXJOGUKPGYHTFWEYIMHSKTJSJTFLGTFEGDGUENEOIHGDGRHGJEKTHGGDFDEEGHGOEEECGYEMGSGDHDHGKPGLIEETGHGTJYHFKSGMJPIOIMJYFEJKISKPJSJOGREOJNIEISHSHGFDGDFGJKFWJTIOISECFLFGHTHSGTENJKINEOKKHTIEGOJKGHETIEIEHKGTEOGDKTJTFPGHJYIHIAISHSINJTIAIHKOJNIYIEIHJPINKOIHIADYDLDRJEHSIAIAJLKPJTJYGDHSJYISJZJNDLEEEEDIDLENDYDIDLDYDIOXIEKSJOKPIDKSJLKSJOKPIDENFYEHFPHSIDGLFDFXKPJOIHINGSGTENECHTGMESGOGUJYGTISGEEHKOFXJOKKHFEEHDIDHTIEKKISGTHTFWINGEHDFPGSGYJYJNJTESJOEEEYHFGHGYIAJEJLFDHFJTETHGGLJSGUEMIEJSJTGEJLJEHTFDFPFDIAFDFLJLHSGYIOJNKOETFYEEECJLGLGOGRKSENFYHTGTGLHTFWFXIEIHIAISHSINJTIEJYJPJLJTIYIEIHJPINKOIHIADYDLDRJEHSIAIAJLKPJTJYGDHSJYISJNJNDLEEEEDIDLEHESECDIDLPRFLWYJT
UR:BYTES/4-4/LPAAAACFAMCECYJYHYKIWKHKADLTDYDIOTIHIAISHSINJTIAJKJLJZIOJOJPJLIYINJZIHJZIDINJOEEEEDPJKJLJZHSJTHSISHSIAIAJLKPJTJYJKLSOXIEJOHSJYISJOJNDLEEEEDIDLECDYEHDIDLDYDIDLDYDIIHINJTIEIHKSAEIOHSIEIEJPIHJKJKKSDWFDFPIOJEEHEEGEJOGTGYGSIOJYENJPHFIOKOEMIAFWGYFGGEHGFGJYJLECFYJSKSINEEEMEYKPGHEOFYGRJOJSJEIOJOJPJLIYINJZIHISJKJYHSJTIEHSJPIEOXIEJOHSJYISJNJNDLEEEEDIDLECDYEHDIDLDYDIIHINJTIEIHKSADIOHSIEIEJPIHJKJKKSDWFLIMGEKKIHFXEHJPEYGMIOJEKPJLFXHGGTKKGDHKJEFXHGGUFLGUFLGSIAKNEYENENFEHSFPJEGSFPEYEMFPISGSIOJOJPJLIYINJZIHIHJYJPKPJKJYOXIEJOHSJYISIMJNDLEEEEDIDLECDYEHDIIHINJTIEIHKSAOIOHSIEIEJPIHJKJKKSDWFYEYGDGDGYGUHKFGIHETEOJTFYKNJEESENFGJSFLKPJNHFGOETGEFPEMGEETKOIMEYGMISIMIAEYJLHDKNFEINECIOJOJPJLIYINJZIHIYJZIHIOHSIAKKISJOJPJLJYJLIAJLJZKPIDINJYJYJLJLJZDPJKINIOJTIHJPDPKTHSJZJZIHJYJSJNHSJKJYIHJPFGINJTIOIHJPJOJPINJTJYISEMEOIAECIEHSDYHSVOTIMSMD

内层规范 CBOR（十六进制）及其 SHA-256

内层 CBOR，1561 字节
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

SHA-256(内层)
c8db82cd92e0cf45cb6329b2429494b04a3b6bad7653c9bed1d2a5ef10f4a5fc

每个账户的第一个地址（BitTool Signer 会将其显示在二维码下方）：

账户	路径	地址
Bitcoin P2WPKH	`m/84'/0'/0'/0/0`	`bc1qcr8te4kr609gcawutmrza0j4xv80jy8z306fyu`
Bitcoin P2TR	`m/86'/0'/0'/0/0`	`bc1p5cyxnuxmeuwuvkwfem96lqzszd02n6xdcjrs20cac6yqjjwudpxqkedrcr`
Bitcoin P2SH-P2WPKH	`m/49'/0'/0'/0/0`	`37VucYSaXLCAsxYyAPfbSi9eh4iEcbShgf`
Bitcoin P2PKH	`m/44'/0'/0'/0/0`	`1LqBGSKuX5yYUonjxT5qGfpUsXKYYWeabA`
EVM	`m/44'/60'/0'/0/0`	`0x9858EfFD232B4033E47d90003D41EC34EcaEda94`
TRON	`m/44'/195'/0'/0/0`	`TUEZSdKsoDHQMeZwihtdoBiN46zxhGWYdH`
Solana standard	`m/44'/501'/0'/0'`	`HAgk14JpMQLgt6rVgv7cBQFJWFto5Dqxi472uT3DKpqk`
Solana trust	`m/44'/501'/0'`	`GjJyeC1r2RgkuoCWMyPYkCWSGSGLcz266EaAkLA27AhL`
Solana legacy	`m/44'/501'`	`D2PPQSYFe83nDzk96FqGumVU8JA7J8vj2Rhjc2oXzEi5`

解码

以下解码器使用 @ngraveio/bc-ur 处理 UR 层，并以严格模式使用 cborg 处理 CBOR：

examples/wallet-pairing.mjs
import { URDecoder } from '@ngraveio/bc-ur';
import { decode } from 'cborg';

export function decodeWalletPairing(frames) {
  const decoder = new URDecoder();
  for (const frame of frames) decoder.receivePart(frame); // any order; repeats are ignored
  if (!decoder.isComplete()) throw new Error(`Keep scanning: ${Math.round(decoder.estimatedPercentComplete() * 100)}%`);
  if (!decoder.isSuccess()) throw new Error(decoder.resultError());

  const ur = decoder.resultUR();
  if (ur.type !== 'bytes') throw new Error('Not a BitTool Signer wallet QR');
  const strict = { strict: true, rejectDuplicateMapKeys: true };
  const inner = decode(ur.cbor, strict);              // layer 1: a CBOR byte string
  if (!(inner instanceof Uint8Array)) throw new Error('ur:bytes must hold a byte string');
  const pairing = decode(inner, strict);               // layer 2: the text-keyed map

  if (pairing.protocol !== 'bittool-signer-wallet') throw new Error('Unknown protocol');
  if (pairing.version !== 1) throw new Error('Unsupported version');
  if (pairing.mode !== 'full' && pairing.mode !== 'simple') throw new Error('Unsupported mode');
  if (pairing.network !== 'mainnet') throw new Error('Unsupported network');
  if (!/^[0-9a-f]{8}$/.test(pairing.masterFingerprint)) throw new Error('Bad fingerprint');
  return pairing;
}

然后派生地址。Bitcoin 使用四种脚本类型；EVM 和 TRON 用 Keccak-256 对未压缩公钥做哈希并取最后 20 字节（TRON 还要加上 0x41 前缀并做 Base58Check 编码）；Solana 地址已经包含在载荷中：

examples/wallet-pairing.mjs
import { HDKey } from '@scure/bip32';
import { keccak_256 } from '@noble/hashes/sha3.js';
import { sha256 } from '@noble/hashes/sha2.js';
import { secp256k1 } from '@noble/curves/secp256k1.js';
import { base58check } from '@scure/base';
import { p2wpkh, p2tr, p2sh, p2pkh } from '@scure/btc-signer';
import { getAddress } from 'ethers';

const child = (xpub, branch, index) => HDKey.fromExtendedKey(xpub).deriveChild(branch).deriveChild(index);

export function firstAddresses(pairing) {
  const out = {};
  for (const account of pairing.accounts) {
    if (account.chain === 'btc') {
      const pub = child(account.xpub, 0, 0).publicKey;   // receive branch 0, index 0
      out[`btc:${account.script}`] = {
        p2wpkh: () => p2wpkh(pub).address,
        p2tr: () => p2tr(pub.subarray(1)).address,        // BIP86: untweaked x-only key
        'p2sh-p2wpkh': () => p2sh(p2wpkh(pub)).address,
        p2pkh: () => p2pkh(pub).address,
      }[account.script]();
    } else if (account.chain === 'evm' || account.chain === 'tron') {
      const point = secp256k1.Point.fromBytes(child(account.xpub, 0, 0).publicKey);
      const hash = keccak_256(point.toBytes(false).subarray(1)).subarray(-20);
      out[account.chain] = account.chain === 'evm'
        ? getAddress('0x' + Buffer.from(hash).toString('hex'))
        : base58check(sha256).encode(Uint8Array.from([0x41, ...hash]));
    } else if (account.chain === 'sol') {
      for (const sol of account.accounts) out[`sol:${sol.profile}`] = sol.address;
    }
  }
  return out;
}

文档仓库中的 examples/test.mjs 会用上面的测试向量运行这两个函数。

接收方规则

一个健壮的接收方应当：

要求 protocol == "bittool-signer-wallet"、整数 version == 1、mode == "full"、network == "mainnet"，以及有效的 8 位十六进制 masterFingerprint。并清楚地说明是哪一项检查未通过。
按键查找账户，而不是按位置；如果载荷缺少某个已知账户，或某个已知账户重复出现，则拒绝该载荷。
忽略未知字段：后续的 v1 载荷可能会新增字段。请按收到的原始字节做检查；不要先删除未知字段、重新编码后再做规范编码检查，否则合法的新版载荷会被误判为无效。
校验每个 xpub：Base58Check、版本 0x0488B21E、深度 3、硬化的子索引、有效的压缩 secp256k1 公钥。拒绝 xprv、tpub 以及 ypub/zpub。
对照上表检查路径，而不是悄悄把未知路径改写为默认路径。
校验 Solana 密钥：Base58 解码后恰好为 32 字节，是有效的 Ed25519 点，且没有重复。
将其视为不可信输入：限制帧数和大小，拒绝重复的 CBOR 键和尾随字节。BitTool Signer 自己的参考解码器还会拒绝非规范的 CBOR。

xpub 的结构可以检查，但来源无法检查。载荷中没有任何内容能证明这些密钥确实来自其声明的指纹或路径，因此用户必须比对地址。

安全说明

载荷只包含扩展公钥和地址。它基于签名器经过认证的公开索引构建，全程不会打开保险库（vault）。
任何扫描到它的人都能看到这些账户的所有地址及其全部历史记录。请像对待任何 xpub 一样处理它：不要写入日志、上传到数据分析服务或附在崩溃报告中。
二维码本身没有签名，也不会对接收方钱包进行身份验证。真正的检查手段是让用户比对地址。

编码​

配对对象​

外层字段​

账户​

测试向量​

解码​

接收方规则​

安全说明​

编码

配对对象

外层字段

账户

测试向量

解码

接收方规则

安全说明