The root problem with conventional hardware wallets is all the trust required to make them work. Manufacturers must be trusted not to leak shipping records, supply chains must be trusted not to intercept devices, and closed-source silicon or firmware updates must be trusted not to introduce backdoors.

Using an iPhone you already own in Airplane Mode removes the extra hardware and the paper trail, but mobile browsers have always had one fatal blind spot: iOS has no terminal to run ⁠sha256sum⁠. Even if you disconnect from the network, you are forced to blindly trust the web code that loaded on your screen before going offline.

We've been working on a pure client-side, zero-dependency (⁠0 NPM⁠) Bitcoin cold wallet designed for Safari Private Mode, built around the world's first live in-browser ⁠SHA-256⁠ self-audit hub.

How the Cold Wallet Mode & Self-Audit Hub work:

1. Verify Before Air-Gap: While still online, the self-audit hub invokes native ⁠WebCrypto⁠ (⁠crypto.subtle.digest⁠) to hash all 6 plaintext source modules and the official ⁠BIP-39⁠ wordlist (⁠2f5eed...⁠) live on your screen. No terminal or compiler is needed—you can cross-check the live hashes directly against the public repository.

2. Air-Gapped Cold Generation: Once the hashes are verified, you turn on ✈️ Airplane Mode. Inside this isolated state, you generate ⁠BIP-86⁠ Taproot cold keys using physical dice entropy without relying on a single third-party library.

3. Clean Exit Before Reconnecting: When your cold address is recorded, a single tap wipes the active state, and you close the Safari Private tab before turning Airplane Mode off—leaving nothing behind when your phone reconnects.

Every line of code is dependency-free plaintext so anyone can read and audit the full execution path directly on the page. You can inspect the architecture and verify the hashes for yourself here:

nahkahmotors.com

https://m.stacker.news/165072