Zafe launches an Android beta for shared Zcash custody, without an external audit so far

An address controlled by several members

Zafe's developer announced a beta version of the shared-custody wallet on the Zcash forum on October 30, 2026. The app is available on Android, with an iPhone version still planned for later. Its aim is to let a group hold shielded ZEC without giving one person complete spending authority. The call seeks users willing to try group workflows and report their observations, rather than presenting a product already validated by an independent audit.

The public repository describes a vault associated with an address, whose members can view the balance, propose a payment and participate in approval. An operation requires the number of signatures set by the group. This separates proposing a transfer from being able to send it alone. It does not automatically resolve a team's choices: the threshold, the people holding shares and their replacement procedures remain practical custody decisions.

A common signature produced from phones

Zafe uses FROST threshold signatures. According to its published architecture, each phone retains a key share and members jointly produce an ordinary signature. The network therefore does not receive a public list of owners comparable to that of some multisignature contracts. The project presents this approach as suitable for Zcash's shielded transactions. This describes the announced mechanism; it is not independent proof that the entire app preserves privacy in every usage situation.

The documentation says phones must verify recipients, amounts and fees before approval and signing. It also describes a relay server that routes encrypted exchanges between members. The relay's role must not be confused with holding the complete key. Communication, backup and recovery choices nevertheless remain important for the group. An architecture that distributes secrets can still encounter software errors, outages or coordination difficulties.

A beta that states its limitations clearly

The creator and repository explicitly say no external audit has yet been performed. The website presents a future review of key, signing and verification code as a step still to come. Open source allows examination, but does not mean an independent specialist has already checked it within the scope of a published audit. Mainnet status also needs to be distinguished from a trial limited to test tokens: errors there can affect real funds.

Losing too many devices without backups can make funds inaccessible, depending on the rules selected. The project describes encrypted backups and replacement options that need to be understood before organizing collective custody. The new development is therefore the opening of a beta and the search for user feedback. Its value for Zcash groups will need to be assessed through documented trials, recovery procedures and any eventual audit results, without confusing an available download with demonstrated security.