Digital Farming Initiative has just released their hotly anticipated mobile Chia wallet redux. I say “hotly anticipated” because there were a lot of hot tempers over the last version and a lot of expectations for this one. The new version of Arbor wallet promises to fix many of the main issues the Chia community had with the first version.
I haven’t had a chance to do a complete code review or anything, or even a deep dive into the source like I did for Nucle, but this wallet supposedly does all the signing on-device and from what I have seen definitely uses the devices hardware key storage for those signing keys.
This is a big improvement from the previous version, and the number one feature that was requested after their first release. I am planning to take a look at the new Arbor Wallet in more detail and see if there is anything of concern. Already on the reddit announcement thread there are suggestions for improvements, like restricting screenshots of keys, but those are normal improvements for updated feature releases not major concerns with the app.
It seems like the team at DFI might have something really good here, especially with the (of course) controversy over the open-sourceness of Nucle. If you want to check out the new Arbor Wallet, you can download it for Android here or iOS here. If you had the previous one installed you might need to clear data and reinstall it a couple times, I had to. But it did work.
If anyone does decide to do a deep dive into the code please reach out to me if you find anything shady and I will take a look. Its important these things are reviewed, even if we trust they are done properly.