Evidence and risk■Verified evidence/△CautionMaterial claims checked against current sources.; those sources show trade-offs worth reading.
Last reviewedReviewed 27 Aug 2026KYC checked 27 Aug 2026 · verified jurisdiction · Source → official siteHow to cite this pageSource coverageVerified evidenceRecorded riskCaution
CAUTIONCurrent privacy policy says App Store/Play Store error reporting can collect IP address, device name, OS version, app configuration, usage time/date and statistics. The official site now markets a DarkFi testnet wallet as coming soon while the linked Android repository's latest release is the November 2024 Zcash v2.2.16 build.
AUDITED BYNo audit listed
OPERATOR DATANone hosted
SOURCE COVERAGE
■Verified evidenceTHIRD-PARTY REPORTED2/3Reviewed 27 Aug 2026 · Source → official site
LAST CHECKED2026-08-27
LAST UPDATED2026-08-27
Specs
DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 0/4
KYC TRIGGERSAdvertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.
Review analysis, source material, related services, and history
About
Open-source Zcash mobile wallet with shielded support and Unified Addresses. Community-built, no KYC, self-custodial. (Zero KYC)
Analysis
OVERVIEW
Nighthawk Wallet gives Android and iOS users a self-custodial Zcash wallet with shielded support and Unified Addresses, kept running by a small US team through Zcash Community Grants instead of outside investors.
LIMITS
No third-party auditor is named for the wallet, and development sits with a small team funded through Zcash Community Grants rather than a company; the US-based team carries the same Five Eyes jurisdiction classification.
USEFUL FOR
Shielded Zcash on a phone for users who weigh grant-funded, small-team maintenance against a Five Eyes-based operator.
Registry-sourced, not audited. The facts below come from cited web research rather than a direct registry query. Each claim links its own source.
Registry research · reviewed 2026-08-09
Frequently Asked Questions
Is identity verification required?
No identity verification is recorded for typical use. Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.
Which payment methods are accepted?
Please check the provider site for accepted payment methods.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
Yes. The recorded jurisdiction is US, a Five Eyes country (US, UK, CA, AU, NZ). This is jurisdiction context and does not by itself establish that a service is safer or less safe.
How are identity, operator, and evidence fields reported?
Identity exposure is level 0 of 4. No hosted operator data is recorded. Jurisdiction is shown as context, not a safety verdict. Source coverage is verified evidence, last reviewed 2026-08-27, and recorded risk is caution.
No changes to the documents we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.
Service history
Latest meaningful changes to the facts shown on this provider page.
Apply full-service rereview and score 4.0
Privacy warning, Recorded risk, Score assessment, Status
Corporate registry information updated
Corporate
Provider presentation updated
Best for, Evidence status, Recorded risk, Tagline, and 1 more
Full service history
updated
Reconcile score 4.0 evidence
Audited by
not set → none
Changed at
not set → 2026-08-27
Checked at
2026-06-24 → 2026-08-27
KYC last checked
2026-06-22 → 2026-08-27
Last reviewed
2026-06-22 → 2026-08-27
Source reviewed
official site → Primary-source review 2026-08-27
Score assessment / Operator data exposure
none → limited
Score review
not set → Outcome: PASS; Checked at: 2026-08-27; Inputs: Operator data exposure: limited; Control model: local-self-custody; Source model: open; Audit: Score eligible: no; Reason: No dated, scoped independent audit of the score-critical core was evidenced in the reopened first-party source family.
Five Eyes Jurisdiction → Current privacy policy says App Store/Play Store error reporting can collect IP address, device name, OS version, app configuration, usage time/date and statistics. The official site now markets a DarkFi testnet wallet as coming soon while the linked Android repository's latest release is the November 2024 Zcash v2.2.16 build.
Recorded risk
standard → caution
Score assessment
not set → Operator data exposure: none; Control model: local-self-custody; Source model: open