BTX PQ wallet

Is it safe?

You can verify every build yourself before running it: match the SHA-256 below and open the VirusTotal report. These are unsigned test builds, so an engine or two may flag them as a precaution; the report shows exactly what each build is. macOS comes back clean; Windows may draw a few machine-learning false positives, explained below.

Why Windows warns you

Two separate things happen on Windows, and neither means the app is malware.

SmartScreen ("Windows protected your PC") is a reputation check, not a virus scan. A brand new app from an independent developer has no download history yet, so Windows warns until enough people have run it. Click More info, then Run anyway.

A few antivirus engines may raise a machine-learning or heuristic flag. These are not matches for known malware. They fire because the installer is unsigned, brand new, and built with NSIS, a common installer format that some engines treat with suspicion. The shape gives it away as a false positive: only machine-learning engines, while the ones people actually run — Microsoft Defender, Kaspersky, BitDefender — come back clean. Check the VirusTotal report linked above for the current build.

The proper fix is code signing, which we are setting up. A signing certificate vouches for the publisher, removes the SmartScreen warning, and clears the heuristic flags. Until then, verify your download: run shasum -a 256 on Mac or certutil -hashfile FILE SHA256 on Windows and confirm it matches the hash above.