We’ve completed Milestone 2 of the Hito Zcash hardware wallet grant.
This milestone builds on the console-based signing engine from Milestone 1 by adding a complete user-facing workflow. Users can now create a Zcash transaction in an Android wallet, transfer it to the Hito device, review and sign it completely offline, and import the signed transaction back into the wallet.
Highlights:
-
Android UI for Zcash hardware-wallet accounts (based on our fork of Unstoppable Wallet).
-
Hardware account onboarding using the Unified Full Viewing Key (UFVK), Unified Address, ZIP 32 seed fingerprint, and network.
-
End-to-end create → export → sign offline → import transaction flow.
-
Transaction review on the Hito device, including recipients, amounts, fee, change, network, and transaction type.
-
Support for Transparent, Sapling, and Orchard transactions.
-
BLE transport with BBQr QR export of the signed PCZT.
-
Additional integration and regression testing for the complete signing flow.
The Android application never receives the hardware wallet’s seed or private spending keys. Signing remains fully offline on the Hito device.
Milestone 2 transforms the signing engine delivered in Milestone 1 into a practical hardware-wallet experience that can be used without any console interaction.