PayNoWay
Bitcoin wallet app made to test payment systems against double-spend attacks.
Double-spending is no longer a theoretical possibility but a practical reality. Most of the end-user applications used widely today leave their users vulnerable to being defrauded via double-spend attacks. PayNoWay is a tool that you can use to test the applications that you, or your business, depend on to accept on-chain cryptocurrency payments.
Features:
- Send payment transactions with the same UX flow as other wallet applications.
- Easily broadcast double-spend transaction after a payment is sent, to return the funds to the internal wallet address.
- Fetch current network fee rate, or set a custom value.
- Optionally set automatic broadcasting of double-spend transactions.
- Control what happens to the payment transaction output - "Drop it" or "Replace with dust".
- By default double-spend transactions are broadcast to several web services simultaneously to improve chances of confirmation.
- Bitcoin mainnet and testnet networks
- Several address types - Legacy (p2pkh), SegWit backwards compatible, SegWit (bech32).
- Transaction history view where you can re-broadcast any past transaction, copy to clipboard any transaction as raw hexadecimal, or update any locally stored transaction by fetching it from the configured web service.
- Statistics dashboard (Payments vs. Double-spends) which shows total number of transactions as well as their total values. Optionally reset the dashboard at any time.
Disclaimers:
- This app is intended to be used for testing and educational purposes.
- Please do not use this app to double-spend against merchants without their explicit consent.
- A successful double-spend is not guaranteed - use at your own risk.
- You are responsible for creating a backup of your private key(s). Without a backup, if you delete the app or lose your device, your funds will be permanently lost.
Permissions:
- Camera, flashlight - To scan QR codes that contain an on-chain addresses, payment requests, and optionally a private key (WIF) during configuration.
- Access network state - For detecting if the device is offline. This helps provide feedback to you, the user, in case of temporary loss of network connectivity.
- Internet - To query web service APIs to broadcast transactions, fetch minimum relay fee rate, fetch transaction history and unspent transaction outputs.
Features:
- Send payment transactions with the same UX flow as other wallet applications.
- Easily broadcast double-spend transaction after a payment is sent, to return the funds to the internal wallet address.
- Fetch current network fee rate, or set a custom value.
- Optionally set automatic broadcasting of double-spend transactions.
- Control what happens to the payment transaction output - "Drop it" or "Replace with dust".
- By default double-spend transactions are broadcast to several web services simultaneously to improve chances of confirmation.
- Bitcoin mainnet and testnet networks
- Several address types - Legacy (p2pkh), SegWit backwards compatible, SegWit (bech32).
- Transaction history view where you can re-broadcast any past transaction, copy to clipboard any transaction as raw hexadecimal, or update any locally stored transaction by fetching it from the configured web service.
- Statistics dashboard (Payments vs. Double-spends) which shows total number of transactions as well as their total values. Optionally reset the dashboard at any time.
Disclaimers:
- This app is intended to be used for testing and educational purposes.
- Please do not use this app to double-spend against merchants without their explicit consent.
- A successful double-spend is not guaranteed - use at your own risk.
- You are responsible for creating a backup of your private key(s). Without a backup, if you delete the app or lose your device, your funds will be permanently lost.
Permissions:
- Camera, flashlight - To scan QR codes that contain an on-chain addresses, payment requests, and optionally a private key (WIF) during configuration.
- Access network state - For detecting if the device is offline. This helps provide feedback to you, the user, in case of temporary loss of network connectivity.
- Internet - To query web service APIs to broadcast transactions, fetch minimum relay fee rate, fetch transaction history and unspent transaction outputs.
- License: GNU General Public License v3.0 only
- Issue Tracker
- Translation
- Source Code
- Changelog
- Build Metadata
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid-
This version requires Android 5.1 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Download APK 6.8 MiB PGP Signature | Build Log