How it works
Cake Wallet is a multi-currency mobile and desktop application that holds private keys locally on the user's device. The codebase is published under the MIT licence on GitHub by Cake Labs LLC, with builds for Android, iOS, macOS, Linux and Windows. After install the user is shown a seed phrase, picks a local passphrase, and is in. There is no signup screen, no email field, and no central account that ties a wallet to an identity. Background sync is supported for Monero, with the option to point at a custom node or route traffic through Tor. Built-in swap and Lightning routing are layered on top of the same vault — the wallet itself never custodies funds, but the aggregator that quotes a trade is a third party.
KYC & privacy
The wallet collects nothing at signup because there is no signup. There is no Cake server holding balances, transaction logs, or contact details. The privacy posture rests on three legs: a non-custodial vault, source-available builds, and the freedom to swap your own node and your own connection in. The catch is the swap aggregator: when a user routes a Monero-to-Bitcoin trade, Cake Wallet hands the request to ChangeNOW, SideShift, SimpleSwap or Trocador, and the data those providers see is governed by their policies, not Cake's. Lightning routing and the Cake Pay gift-card flow ride the same model — Cake hosts the interface, the partner takes the order. No KYC at the wallet layer; sometimes KYC at the partner layer, depending on the rail and the size.
Strengths and limits
Where Cake stands out is its Monero workflow — remote nodes, Tor toggles, sub-addresses, and a UX that does not punish users who choose XMR over BTC. The chain coverage is broader than the wallet's reputation suggests: BTC, Lightning, ETH, SOL, LTC with MWEB, BCH, Polygon, Nano, Decred, Zano, Wownero. Open source on GitHub since 2018 means a public commit history and a public issue tracker. The most-cited weakness is historical: in May 2021 the team disclosed a weak pseudo-random number generator affecting a subset of legacy Electrum-format Bitcoin seeds; the patch shipped, and v4.12.0 in late 2023 added warnings for users still holding affected mnemonics. The episode is documented in the Milk Sad research and in Cake's own changelog. Day-to-day, the heaviest cost is Monero sync on older phones; the next is the layered fee that aggregators take when routing through the in-app swap. There is also no publicly named third-party security audit firm to point at, only the team's own statement that the code is reviewed regularly.
Verdict
Seven years on, Cake Wallet is one of the few mobile clients that treats Monero as a first-class citizen and lets the user control nodes, Tor and seed without dressing it up. The 2021 PRNG episode is the kind of thing legit projects survive — disclosed, patched, warned about in code. Power users will mind the swap-fee stack and the absence of a named audit firm; everyone else will appreciate the wallet that asks for nothing.
A non-custodial multi-chain wallet whose entire posture leans on the user's own keys, the user's own nodes, and a swap layer that hands KYC to whichever venue takes the order. The 2021 PRNG episode was disclosed, patched and wired into in-app warnings; nothing else of that weight has surfaced since. Grade: A- (8.6/10). Trust: TRUSTED.
