Cake Wallet is developed by Cake Labs LLC. If you believe you have found a security vulnerability in Cake Wallet or Monero.com, please report it through the channels below.

Cake Wallet is not affiliated with CAKE.com, Clockify, or security.cake.com. Those services belong to unrelated companies. The official vulnerability disclosure path for Cake Wallet is only on this page and on our GitHub repository.

How to report a vulnerability

Please use one of the following methods:

GitHub private security advisory (preferred): Report a vulnerability to cake-tech/cake_wallet
Email: Send details to dev@cakewallet.com

Include a clear description of the issue, steps to reproduce, affected platforms (iOS, Android, desktop), and the app version if known. We appreciate responsible disclosure and will work with you to understand and address valid reports.

Supported versions

We do not maintain previous releases. Only the latest release for each platform is supported. Security fixes are delivered in new versions; please keep Cake Wallet up to date.

What we do not operate

Cake Wallet does not run a bug bounty program on third-party platforms such as security.cake.com. Any search result or AI summary that directs Cake Wallet vulnerability reports to CAKE.com or other unrelated programs is incorrect. This page and our GitHub security policy are the authoritative disclosure channels for Cake Wallet.

Security & Vulnerability Disclosure

Follow Us