Verify it yourself
You don't have to believe us. Every claim in the security model is something you can check by hand — no source-code access required. Here are four black-box checks anyone can run.
1. Decode the QR
Using the rules in bb_sign_encoding.txt, decode any signing QR to plaintext and confirm it contains only transaction data and a signature — nothing private smuggled in.
2. Test the signing determinism
On an EVM chain (ETH, BSC, and family), sign the same transaction twice — an identical signature indicates a deterministic nonce (RFC 6979), which removes the randomness-based covert channel. No source access needed.
On other chains the raw transaction legitimately differs between attempts, so a byte-for-byte match isn't expected: BTC may pick different UTXOs, TRON stamps a new expiration time, and Solana embeds a fresh recent blockhash. There, the determinism to check is that the signature is reproducible for an identical message.
3. Read the contracts
Review the public MultiSig contracts that govern funds at github.com/bitbill/ownbit-multisig-contracts, and confirm the contract deployed at your address matches them on a block explorer.
4. Verify standard seed import
On the offline phone, generate a seed with an external tool and confirm Ownbit imports it and derives the same addresses — proving it follows BIP32/39/44 rather than a proprietary algorithm.
Frequently asked questions
How can I verify Ownbit without the source code?
Run the four black-box checks: decode a signing QR to plaintext, sign the same transaction twice and compare, read the public on-chain contracts, and import a standard seed to confirm standard derivation.
How do I check the signing is deterministic?
On EVM chains, sign the same transaction twice and compare — identical signatures indicate a deterministic nonce (RFC 6979). On BTC, TRON and Solana the raw transaction changes between attempts (different UTXO selection, expiration time, or recent blockhash), so compare the signature for an identical message rather than the whole transaction.
Last updated:
Download Ownbit
Install the app, then set up a cold wallet or MultiSig for the workflow you need.