Skip to content
Early software: test with small amounts only.

Your keys never touch your phone.

A self-custodial Lightning wallet with a dedicated hardware signer. Sign instantly in Blind signer mode, or confirm each payment with a tap on the device (beta).

01 / The problem and the idea

Separate the keys from the phone.

Phone wallets hold your keys. Phones get hacked.

Corisco moves the keys to a dedicated device.

Your keys never leave the hardware signer.

Sign instantly with Blind signer, or approve each payment with a tap (beta).

02 / How it works

Phone talks to the network. Device holds the keys.

Built on Spark's FROST-based threshold signing protocol (spark.money).
  1. 01

    App builds the transaction

    The Android app prepares the payment.

  2. 02

    Sent over Bluetooth (BLE)

    The unsigned request goes to the paired device.

  3. 03

    Device signs

    Automatically in Blind signer mode, or after a tap in tap-confirmation mode Beta

  4. 04

    Signature returns

    Only the signature goes back to the app.

  5. 05

    Payment goes out

    The app broadcasts over Lightning.

03 / Signing modes

Choose how the device signs.

Blind signer

Default
  • — Signs without a tap or per-transaction confirmation.
  • — Fastest experience.
  • — Keys stay on the device.

Note: signing doesn't require a physical tap. If you want to approve each payment, use tap confirmation (beta).

Tap confirmation

Beta
  • — Each signature is approved by a physical tap on the device's screen.
  • — Stronger control over what gets signed.
  • — Still being tested.

04 / Features

What's in the box.

Self-custodial

Blind signer

Sign without a tap

Tap confirmation Beta

Bluetooth pairing

PIN-protected device

BIP39 recovery words

Threshold signing (FROST)

Open source

Android now

iOS coming soon

05 / Compatible devices

One device today. More coming.

Corisco currently supports a single hardware signer. Support for more devices — including Corisco proprietary devices — is planned.
Supported

LilyGo T-Display-S3 (touch version)

The only supported device for now. Flash it with the Corisco firmware:

esp32-lilygo-t-display-s3-firmware-*.binDownload from corisco-firmware/releases/latest
Planned

More devices coming

Additional hardware will be supported over time, including Corisco proprietary devices.

06 / Quickstart

Try it in 10 minutes.

You need

  • LilyGo T-Display-S3 (touch version) and a USB data cable
  • An Android phone with Bluetooth (iOS coming soon)
  • A computer with Rust installed (used only for flashing)

Install the app

Download the APK from the latest release:

github.com/corisco-wallet/corisco-android-app/releases/latest
Early software: test with small amounts only.

07 / Device firmware

Set up the signer, screen by screen.

The firmware runs the whole wallet setup on the device's touchscreen. Your recovery phrase and PIN never leave it. Step through a fresh setup, or see how to restore a wallet from its recovery phrase.
CoriscoCreate new walletRecover wallet
1 / 8

Support Corisco

Corisco is an independent open-source project. Donations help cover ongoing maintenance, test hardware and running the Lightning address server.