Chaumian e-cash protocol on Bitcoin Lightning. The mint cannot link sends to receives — genuine transactional unlinkability. CAUTION: each mint is a custodian. If the mint disappears, tokens are worthless. Best for small amounts on trusted mints.
DIY Bitcoin signing device built from off-the-shelf Raspberry Pi Zero parts (~$50-70). Stateless: powers off with no private key storage. Air-gapped QR code signing. The most sovereign hardware option — no trust in any manufacturer.
Cashu scores 69/99 and SeedSigner scores 89/99. Use this page as a starting point, then review each provider profile for ownership, warnings, and policy changes.