Hold ecash on your phone.
Independent, open source, and free. Run a Cashu wallet on iOS, Android, or in the browser, and hold bearer tokens the way you hold cash.
Instant, bearer, peer-to-peer.
Cashu is an open protocol for Chaumian ecash on bitcoin. Mints issue bearer tokens against Lightning, wallets hold them, and blind signatures keep a mint from tying the withdrawal to the spend that follows it. Every part of it is specified in public.
Independent, open source, and free. Run a Cashu wallet on iOS, Android, or in the browser, and hold bearer tokens the way you hold cash.
Mints bridge Lightning and ecash. A blind signature lets a mint issue a token without learning who ends up holding it. Ecash is a claim on its mint, not a deposit.
Cashu is documented in version-controlled NUTs. Read them, implement them, fork them, propose your own. Nothing about the protocol is held back.
Tokens are bearer strings of bitcoin. Instant, final, and small enough to fit anywhere text goes: a chat, a QR, an email, an HTTP header.
Active across Python, Rust, TypeScript, and Kotlin. The cashubtc organization hosts the spec, the SDKs, and the reference wallets.
// Cashu Token v4, CBOR encoding { "t": [{ "i": h'00ad268c4d1f5826',// keyset id "p": [{ "a": 64,// sats "s": h'02ab34c1…9c7cf1',// blinded signature "d": h'0248e1b9…5b73e4'// DLEQ proof }, { "a": 128,// sats "s": h'03c9f0a7…41ae7e', "d": h'0187bd42…62d4a6' }] }], "m": "https://mint.example.com", "u": "sat", "v": 4 }




(opens in a new tab)