Unstoppable Wallet: The Open Source App, Not the Namesakes

A woman looks at her smartphone to manage her unstoppable wallet while sitting at a kitchen table.

Written by

in

Unstoppable Wallet is the free, MIT licensed, self custody phone app from Horizontal Systems, last updated on 14 October 2026. Three other products share the name: a smart contract wallet, a domain company’s wallet and a memecoin. Its audit dates from 2021, and the iPhone build cannot be independently verified.

Listen to this article, about 12 minutes. A synthetic voice reads the article and announces each section title as it begins; tables are read row by row and the questions at the end are left out.

Recorded 15 October 2026 from the article as published that day. Press a chapter to jump there; the highlighted line is what is playing. A play button sits beside every section heading, and once you scroll past this player a bar at the bottom of the screen keeps the controls in reach. Tap or click any sentence to hear the reading start from there.

On this page: a table setting apart the four products called Unstoppable with a source for each, the CertiK and WalletScrutiny results with their dates, the release cadence read from GitHub on 15 October 2026, and six user reports from the app’s own issue tracker.

Think you already know this? Five questions, one minute.

Every answer is on this page. Answer from what you know now; the page fills in the rest.

  1. 1. Which Unstoppable product did ChainSecurity audit on 7 February 2025?

  2. 2. What does WalletScrutiny say about the iPhone build of Unstoppable Wallet?

  3. 3. How many findings did the CertiK penetration test report list?

  4. 4. What does the official site say Duress Mode is for?

  5. 5. What is the Android package name of the real Unstoppable Wallet app?

Which Unstoppable wallet is this page about?

Search for unstoppable wallet and you get four different things wearing one name, which is roughly what happens when crypto runs out of adjectives. This page covers one of them: the phone app published by Horizontal Systems, with its code on GitHub for Android and iPhone. Its Android package name is io.horizontalsystems.bankwallet, a leftover from an earlier name, and that string is the quickest way to tell the real listing from a copy.

The other three turn up in the same results, mixed in with the app as if they were one product. Here is what each one is, read on 15 October 2026.

Product called UnstoppableWhat it actually isHolds bitcoin keys?Source
Unstoppable Wallet by Horizontal SystemsA self custody phone app for Android and iPhone, MIT licensedYes, from a recovery phrase made on your phoneunstoppable.money, GitHub
The Unstoppable Wallet smart contractsAn Ethereum smart contract wallet with WebAuthn sign in, inheritance and social recovery, first deployed on ArbitrumNo, it is an Ethereum contractChainSecurity audit, 7 February 2025
Unstoppable Domains walletsA web3 domain company’s own wallets, including a password based Lite WalletBuilt for domains and selected tokensunstoppabledomains.com
A Solana memecoinA token from the pump.fun scene, run by an anonymous team according to the exchange pages that list itNo, it is a token, not a walletExchange listing pages, not linked here

Two warnings that come straight out of that table. If a page tells you Unstoppable Wallet was audited by ChainSecurity, it has confused the app with the smart contracts. And if anything called Unstoppable invites you to buy a token, it is not the app, which sells nothing of its own. Not every wallet keeps that distance, as the June 2026 exploit of Klever’s own chain showed when swap inside the Klever app had to be restored. This site will not tell you whether to buy any coin, that one included.

Is Unstoppable Wallet open source and verifiable?

Open source, yes. Verifiable, only partly, and the difference matters. Both GitHub repositories carry the MIT licence, and the code is busy: the Android app shipped version 0.52.0 on 9 October 2026 and 0.52.1 on 14 October, and the iPhone app shipped version 0.52 on 8 October. The 0.52 notes add XRP, a redesigned Send screen, and two new ways to pay called Private Send and CrossPay.

Open code only helps if the app on your phone was built from it. That is what WalletScrutiny tests, by rebuilding the app and comparing it byte for byte. Its page, read on 15 October 2026, says of the iPhone app that nobody has reproduced the build, so the claim is not verifiable. That is true of every iPhone wallet, not a black mark on this one. For Android it lists the latest releases as 0.52.0 and 0.51 but shows its build check only as a legacy verification from 2024. An older version of the page recorded version 0.28.0 as reproducible when tested in November 2022. We found no published reproducibility result for the current Android release.

Where you get itLatest version on 15 Oct 2026Who builds and signs itIndependently rebuilt?
Google Play or the GitHub release0.52.1, 14 OctoberHorizontal SystemsLegacy 2024 record only
F-Droid0.51.2, added 2 OctoberF-Droid, from the published sourceF-Droid builds it from source itself
Apple App Store0.52, 8 OctoberHorizontal Systems, through AppleNot verifiable

The F-Droid listing adds one honest label of its own: an anti-feature called Non-Free Network Services, because the app fetches news and exchange rates from services that are not open source. It does not touch your keys, but it does mean the app talks to third parties. Our guide to open source crypto wallets explains why the build question matters more than the licence.

A man at a laptop in a home study reading the open source code behind the unstoppable wallet app.
Open code helps only when someone has rebuilt the app from it, and the iPhone build has never been reproduced.

What did the security audits of Unstoppable Wallet find?

One audit of the app itself, and it is old. CertiK ran a white box penetration test against the public Horizontal Systems code between 2 and 9 December 2020. The report is dated 10 December 2020 with a final revision on 5 February 2021, and lists four findings: one medium, two low and one informational. CertiK’s own press release of 27 February 2021 counts them as one medium, one minor and one informational, which adds up to three, so the two documents disagree on a detail. Both say the team dealt with every finding and that nothing major or critical was found.

That test covered the app as it was in early 2021. Monero, XRP, the swap screens and Private Send all arrived later, and no public audit we could find covers them. The other running check is a bug bounty on Immunefi, live since 4 March 2022. On 15 October 2026 it listed a maximum reward of $1,000, flat for both critical and high severity bugs, with the page last updated on 11 September 2026. Earlier versions of the same listing, as captured in search results, showed $10,000 for a critical bug. We could not find a reason for the cut.

CheckDateWhat it coveredResult
CertiK penetration test2 Dec 2020 to 5 Feb 2021The mobile app codeFour findings, none major or critical, all addressed
WalletScrutiny build checkNovember 2022Android 0.28.0Reproducible when tested
Immunefi bug bountySince 4 Mar 2022The two mobile apps$1,000 maximum on 15 Oct 2026
ChainSecurity audit7 Feb 2025A different product, the smart contract walletTwo significant recovery findings, addressed

The last row is the one affiliate reviews get wrong, presumably because nobody who writes them has opened the PDF. The ChainSecurity work is real and its findings were about ownership transfer and social recovery in Ethereum contracts. None of it applies to the phone app.

What security features does Unstoppable Wallet actually have?

The official site lists three that matter for keeping keys safe. Duress Mode, described there as a security mode for use under coercion, is what users on forums call a decoy wallet: a second passcode that opens a different set of wallets. Tor support routes the app’s traffic to hide your IP address, which WalletScrutiny rates as partial. And address poisoning protection warns about look alike addresses planted in your history by scammers. The same site states that no user data is collected.

The wallet is built from a standard recovery phrase, 12 words by default, and WalletScrutiny lists the usual bitcoin standards, BIP 39 through BIP 86, so the phrase should restore in other wallets that follow them. Swaps are another matter: they run through outside services such as THORChain, and WalletScrutiny notes the usual third party risks of fees, sign up demands and failed deliveries. Those services never see your phrase, but they do hold your coins mid swap. If you want to know how that differs from an exchange holding them, our piece on who holds your keys on Binance sets it out.

Your recovery phrase belongs on paper or steel, never on a website, a form or a support chat. No genuine Unstoppable support channel will ask for it. The recovery phrase guide covers how to store it.

What do users report on Unstoppable Wallet’s GitHub?

The Android repository had 115 issues opened since June 2025 that mention lost, missing, stuck, balance or restore. We read six of them in full on 15 October 2026. This is testimony, what users say happened, not a finding about the app.

The most serious came in March 2026, when a user reported that swaps between USDT and ETH vanished without an error after an older swap route was removed, about 400 USDT on one day. They sent details to the team by email and the issue was closed in June 2026 with no public outcome. In August 2025 another user saw their Monero balance and history drop to zero after trying to send unconfirmed coins; a developer called it a known issue with newly created Monero wallets and promised a fix in the next release.

Monero comes up again. In an October 2025 thread about endless syncing, two users said the problem cleared only when they made a new wallet with the standard 12 word phrase instead of a 21 or 15 word one. The same thread shows one user pasting the words of a phrase, for an empty wallet, into a public issue. Never post a recovery phrase anywhere, even for a wallet you think is empty.

Not every complaint holds up. A June 2026 report of a transaction showing a value of zero turned out to be too little ETH for the fee. An August 2026 worry that a downward swipe could delete a coin got the reply that the gesture works only on the Balance tab and must be deliberate, though the user stayed unconvinced. Where the accounts agree with the official picture: in the threads we read, the trouble sits in the newer coins and the swap screens, and none of the threads we read described bitcoin keys being exposed.

How do you check you have the real Unstoppable Wallet app?

Hands hold a phone showing a shield icon beside a small steel safe, checking the unstoppable wallet app.
Check the publisher and the package name before installing. No genuine app or support desk asks for your phrase.

Start from the publisher, not a search ad. Follow the store links on unstoppable.money, or take the build from the GitHub releases page or F-Droid. On Android, check the package name is io.horizontalsystems.bankwallet. Compare the version you have with the release dates above; a listing stuck on an old number, or offering extra features, is a reason to stop.

Then decide how much you are trusting it with. A phone wallet that holds many coins, swaps them and connects to apps has more moving parts than a single purpose one, which is the same trade off our Trust Wallet review looks at. If privacy is the attraction, the story of Samourai Wallet is worth reading first, and if you are weighing an app with no phrase at all, the Zengo guide explains what you hold instead.

Frequently asked questions

Who makes Unstoppable Wallet?

Horizontal Systems publishes the app and its code on GitHub under the MIT licence. It is not connected to Unstoppable Domains or to any token called Unstoppable.

Is Unstoppable Wallet custodial?

No. WalletScrutiny lists it as self custodial, meaning the user holds the keys, which come from a recovery phrase made on your own phone.

Does Unstoppable Wallet work with a hardware wallet?

The official site does not list hardware wallet support among its features. An Android issue from September 2025 asked for full support for a Ledger Flex and was closed, so check the current release notes before relying on it.

Is Unstoppable Wallet on F-Droid?

Yes. F-Droid listed version 0.51.2 on 2 October 2026, built and signed by F-Droid from the published source, which makes it a version or two behind the Play Store build.

Can I restore an Unstoppable Wallet phrase in another app?

For bitcoin, a standard 12 or 24 word phrase should restore in other wallets that follow BIP 39. Users on GitHub report that Monero restores between apps are less reliable.

How much does the Unstoppable Wallet bug bounty pay?

The Immunefi listing showed a maximum of $1,000 on 15 October 2026, flat for critical and high bugs. Earlier versions of the listing showed $10,000.

Finished the page? The same five questions from the top, to see what stuck.


This article is educational and is not financial advice. Nothing here is a recommendation to buy, sell or hold anything. You are responsible for your own security decisions.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *