For reviewers & developers

Take a closer look
at BitTool.

Two mobile apps. Different roles. Start with the product facts, inspect the evidence, and test the workflow for yourself.

Download reviewer pack See what was verified

Updated 30 October 2026 · Resources in English · No sign-up

Product facts

The signer and the wallet.

Both are free apps for iPhone and Android. Blockchain transaction fees still apply when an online wallet broadcasts.

Dedicated offline phone

BitTool Signer

Reviews and signs transaction requests on a separate phone. Requests arrive by QR; signatures return by QR to an online companion.

Role: Signing keys stay on the dedicated signing device. The companion handles network access and broadcasting.
Platforms: iOS 17+ · Android 8+
Release snapshot: iOS 1.0.0 · Android 1.0.0 (1000001)
Source: The iOS repository is MIT-licensed. Android source is public; no Android license claim is made in these materials.

An app on an ordinary phone, rather than a purpose-built hardware device. Protocol support does not establish compatibility with every companion app.

Product & downloads iOS source Android source

App Store Google Play

Online wallet & companion

BitTool Wallet

Sends and receives crypto from your phone. Use it as a hot wallet, or pair with BitTool Signer so a separate device authorizes signatures.

Networks: Bitcoin, Ethereum, BNB Chain, Arbitrum, Base, TRON and Solana. Includes WalletConnect support.
Platforms: iOS 18+ · Android 8+
Release snapshot: iOS 1.1.0 · Android 1.1.0 (1010000)
Source & review: No Wallet open-source or independent-audit claim is made here. Signer's license and test results do not apply to Wallet.

In hot-wallet mode, this phone holds its signing keys. In Signer-paired mode, Wallet serves as the online watch-only companion.

Product & downloads

App Store Google Play

Snapshot dated 30 October 2026. Check the current store listing, device requirements and installed build before testing.

Evidence, with its scope

What has been checked.

These local checks cover specific Signer engines and the published Android package. They were prepared with AI assistance and are not an independent security audit.

iOS release engine

210 / 210 tests passed

The v1.0.0 JavaScript engine was rebuilt from its release source and matched the tracked bundle.

Inspect release source

Android release engine

217 / 217 tests passed

The android-v1.0.0 engine rebuild matched both its tracked bundle and the asset inside the downloaded APK.

Inspect release source

APK engine in a Node VM

8 / 8 checks passed

Six selected Bitcoin PSBT/UR cases and two expected refusals. The VM used Node's random-number source, not the phone's native bridge.

Read measured results

Also checked

The direct-download Android APK 1.0.0 passed APK Signature Scheme v2/v3 verification. Its certificate matched the publisher's reference, and its parsed manifest contained no INTERNET permission.

Still outside this evidence

No real-device, camera, biometric, native-bridge or companion-app test was performed for this pack. No complete APK/AAB was rebuilt, and no App Store IPA was inspected.

The iOS and Android release-engine hashes differ. Their regression suites overlap; the counts are not 427 unique tests. Engine rebuilding and package inspection do not establish complete app reproducibility or prove every runtime behavior.

Download the exact versions, hashes and limitations (English)

Before evaluating

Read the security context.

Source availability, automated tests and AI-assisted reviews are useful evidence. Each has limits.

Published reviews & disclosures

Public reviews, not an independent audit

The published reviews are AI-assisted. The publisher discloses that the same model family involved in some reviews also wrote much of the code. No independent security-firm audit is claimed.

Open findings remain visible

The reviewed 1.0.0 materials include unresolved issues involving Solana authority summaries, Bitcoin change-address discovery, native values in stored EVM/TRON summaries, and Android release-key storage on the development machine. The last finding is not evidence that the key was leaked.

Some shared-engine findings also affect iOS. The checks above do not resolve these findings. Consult the current finding status and affected revisions when evaluating a newer build.

Compatibility needs an actual round trip

Importing an address or pairing a watch-only wallet does not demonstrate request construction, review, signing and response verification. Our supplied device matrix is blank: all 12 planned combinations are marked Not run.

Read the protocol and compatibility scope

Start an evaluation

A test plan, not a verdict.

Record the exact builds, devices, requests and results. Keep failures and limitations alongside successful checks.

Use synthetic inputs. Do not broadcast.

The inspected Bitcoin signing release is mainnet-only and rejects testnet. The included Bitcoin fixtures use mainnet syntax, public test keys and fabricated inputs. Never fund these keys or broadcast these transactions. This run used no real funds or real UTXOs; no claim is made about the public addresses' historical activity.

ZIP · English

The reviewer pack

Product brief, evaluation procedure, verification notes, blank device matrix, six public fixtures and official illustrations.

Download the pack

Markdown · English

Repeatable test steps

Preparation, public pairing data, request review, signature verification, cancellation and negative cases.

Download the procedure

JSON · Empty template

Your device matrix

Track each phone, OS, companion build, network and request format separately. A planned row is not a compatibility claim.

Download the matrix

For integration details, see the developer quickstart and documented protocol vectors. No demonstration video is included: none was recorded for this pack.

Media assets

Show the right product.

Use these images to illustrate your coverage. Keep product names and context accurate, and do not imply an endorsement.

Signer iconPNG · dark

Wallet iconPNG · light BitTool markSVG · vector

Signer preparation guide, a simulator illustration — **Signer · Preparation**Interface illustration

Signer settings, a simulator illustration — **Signer · Settings**Interface illustration

Wallet portfolio with sample balances — **Wallet · Portfolio**Sample balances

Wallet's hot-wallet and Signer-pairing choices — **Wallet · Setup**Two distinct modes

Click an image to download its original WebP. These official screenshots were captured in an iOS Simulator. Wallet balances are sample data. The Signer settings/preparation images show Wi-Fi status icons; they illustrate the UI and do not prove that a physical device is offline.

Technical & editorial questions

Tell us what you find.

You decide whether to test or publish, what to conclude, and which shortcomings to report. No payment or favorable coverage is offered in these materials.

tomtan@bittool.com

Tom | BitTool
BITTOOL PTE. LTD.

21 Woodlands Close, #04-30
Primz Bizhub, Singapore 737854