BULL Wallet review: a privacy-minded phone wallet from Bull Bitcoin

BULL is published on the App Store by Satoshi Portal Inc, the company behind Bull Bitcoin, which says it was founded in 2013 at the Bitcoin Embassy in Montreal. Its README calls it a self-custodial Bitcoin and Liquid Network wallet with non-custodial swaps across Bitcoin, Lightning, and Liquid. The code is licensed under MIT.

The App Store listing states that BULL is Bitcoin-only and segwit-native. It holds bitcoin on-chain and on Liquid, a Bitcoin sidechain, and my rating methodology allows Liquid, so BULL sits in my ranked list on the software wallets page. It runs on iPhone and Android, with no desktop version.

The current release is 6.15.0 from October 26, 2026. Each GitHub release carries the Android APK with a signed HASHSUMS256 file, and the README links Android reproducible build instructions so others can check the published app matches the source.

During setup, BULL creates two default wallets that share one seed phrase: a Secure Bitcoin Wallet using native segwit addresses, and an Instant Payments Wallet on Liquid using confidential addresses. One backup restores both.

Lightning invoices can be paid from either wallet, and incoming Lightning payments land in the Instant Payments Wallet through the configured swap service. You can set BULL to move excess funds from the Liquid wallet to a Bitcoin wallet automatically, with balance and fee limits, so spending money does not pile up on Liquid.

BULL fits someone who pays over Lightning from a phone, cares about on-chain privacy, and wants savings signed by a hardware wallet in the same app. It also fits Bull Bitcoin customers: the README says the exchange sends purchased bitcoin straight to a receiving address the app creates, and the wallet works whether or not you have an exchange account.

Pick something else if you want one simple balance. Muun makes all payments from a single wallet for on-chain and Lightning, and a dedicated app from my Lightning wallet rankings keeps real channels. If you want Liquid plus a desktop app, the Blockstream app runs on computers as well.

Install BULL from the official store listing, or download the APK from GitHub releases and check it against the signed hash file. Then:

BULL builds unsigned transactions (PSBTs) for an outside signer, and its README lists QR signing for Jade, Passport, Keystone, SeedSigner, Specter, and Krux. Of those, the Bitcoin-only devices I review are SeedSigner, Krux, Jade, Specter DIY, and Passport. Version 6.13.1 updated the Foundation Passport import instructions.

The README also lists Ledger and BitBox over USB or Bluetooth, depending on device and platform. Ledger is multi-coin, so I would not use it here. A QR device keeps the hardware wallet away from the phone entirely, and you confirm each address and amount on its own screen before signing.

BULL supports Payjoin v2, a way to build a payment with inputs from both sender and receiver so chain analysis cannot assume every input belongs to the payer. Since 6.15.0, Payjoin is on by default for Bull Bitcoin buys, sells, and bill payments, and off by default for sends to other users, with a switch for each.

BULL can connect to your own Electrum server, including .onion servers through embedded Tor, and supports coin control and BIP-329 labels. Use your own server if you can. The 6.15.0 notes say plainly that default Electrum servers receive your wallet's addresses during synchronization, and that faster Payjoin status checks let a shared server link Payjoin sessions. My node rankings and Electrs vs Fulcrum guide cover running one.

Both store listings declare that the developer collects no data: the App Store privacy label and the Google Play data safety section. Those labels are self-reported.

The wallet is free. You pay Bitcoin and Liquid network fees, plus swap fees on Lightning payments and on transfers between Bitcoin and Liquid. BULL fetches Bitcoin fee estimates from a mempool instance, with Fastest, Economic, and Slow presets and a custom option, supports replace-by-fee, and warns about high fees. Exchange features such as AutoBuy and limit orders belong to Bull Bitcoin's exchange and carry its pricing.

The repository shows no published GitHub security advisories, and BULL is not in my security incident tracker. In early September 2026 the team published three internal pre-releases to debug swap issues, marked for use only when its support team asks.

Version 6.15.0 added two protections worth knowing. Before it offers to speed up a transaction, BULL now checks that the transaction carries valid signatures from your own wallet, which blocks the malicious Electrum server attack Electrum disclosed. It also added a retry button that completes a stuck swap on-chain through your own Electrum server without Boltz's cooperation.

BULL packs more privacy and hardware wallet options into a phone wallet than most, and its release notes are unusually candid about trade-offs. It ranks just below AQUA because its two-wallet design asks more of a beginner and its Lightning depends on a swap service, one that needed debug builds in September 2026. If you pair it with a QR hardware wallet for savings and your own Electrum server, it is a strong phone wallet.