Blink Wallet Releases Version 3.0.46 with Balance-Based 2FA and Spark Emergency Exit
Blink Wallet, the everyday Bitcoin wallet originally developed for the Bitcoin Beach circular economy in El Zonte, El Salvador, released version 3.0.46 on November 6, 2026.
The update strengthens security for custodial accounts and improves recovery options for self-custodial wallets. It is available now on the Apple App Store and Google Play and is the first broad release since August 24, 2026.
The changes respond directly to a September 19, 2026 security incident. An attacker exploited a flaw in Blink’s admin tools, took control of 35 accounts, and withdrew roughly 6.61 BTC from 24 of them. Nine accounts that already had two-factor authentication enabled resisted 18 attempted withdrawals.
Blink’s shareholders restored every affected balance in bitcoin and dollars. In the subsequent post-mortem, the team stated that 2FA should have been required for larger balances. Version 3.0.46 implements that recommendation.
Balance-Based Two-Factor Authentication for Custodial Accounts
Custodial accounts on Blink hold funds with the company and log in via phone number or email. Two-factor authentication adds a second layer: a 6-digit code generated by an authenticator app. Even if an attacker obtains login credentials, they cannot move funds without the code.
The new system “nudges” users according to balance size:
- Below 50,000 sats and under $50: No automatic prompt. Users can still enable 2FA in Settings at any time.
- From 50,000 sats or $50: A suggestion card appears on the Home screen.
- From 500,000 sats or $500: A persistent reminder appears on Home. It can be dismissed but returns if the balance reaches a new high.
- From 5,000,000 sats or $5,000: 2FA becomes mandatory. After three reminders, the user must enable an authenticator or migrate the account to a self-custodial wallet to continue using it. Once an account has reached this threshold, 2FA remains enforced.
Setup is guided. The app suggests free authenticator apps if needed, generates a setup key, and walks the user through verification. Users are instructed to back up the key outside the phone; Blink does not store a copy.
Changing login methods, adding contact information, or disabling 2FA now requires the authenticator code.
Spark Emergency Exit for Self-Custodial Wallets
Blink introduced self-custodial (non-custodial) accounts in 2026, powered by the Spark protocol. Users hold a 12-word recovery phrase. Spark operators co-sign payments, but they cannot spend funds without the user’s key.
If the operators become unreachable, the 12-word phrase alone is not sufficient to recover funds. A recent snapshot of the wallet’s state, called an “emergency bundle”, is also required.
From version 3.0.46, the app automatically creates the emergency bundle after the first transaction and refreshes it after every subsequent payment. No user action is needed for creation. The bundle is saved alongside the encrypted cloud backup (Google Drive or Apple iCloud).
If the cloud copy falls more than a week behind, the Home screen prompts the user to update it. Users who prefer not to use cloud backup can manually download the bundle from Settings → Security and Privacy → Emergency exit. Blink never receives the bundle.
If Spark operators go offline, recovery uses the bundle plus the 12-word phrase with open-source tooling (not yet an in-app button). The process takes roughly two weeks because of on-chain timelocks, incurs Bitcoin network fees, and recovers only the Bitcoin balance, not any Dollar (Stablesats) balance.
This builds on a documented July 2026 mainnet case study in which the team successfully forced approximately 90,000 of 100,000 sats back onto the Bitcoin chain using only a seed and a previously saved recovery bundle.
Additional Improvements
The update also brings a series of smaller enhancements, particularly for self-custodial wallets:
- Pay codes (merchant QR codes) now work over Lightning.
- Fractional-satoshi Lightning invoices are accepted and paid.
- Clearer error messages when a merchant’s Lightning service is down.
- Exportable support logs that include payment history and identifiers but never private keys.
- New wallets default to the currency of the phone’s region.
- Verified (Level 2) custodial users can submit places directly to the BTC Map.
- Expanded screenshot blocking on sensitive screens (cloud backup, seed entry, 2FA setup).
- App lock that persists after logout, with PIN fallback and progressive lockouts.
- Optional anonymized analytics and crash reporting in Enhanced mode; Incognito mode shares nothing.
- UI refinements, including notifications moved to the top of Home and landscape support on tablets.
Blink originated as Bitcoin Beach Wallet to support everyday Bitcoin use in El Salvador. And has since expanded to circular economies in multiple countries. It continues to offer both simple custodial onboarding and self-custodial options that keep keys with the user while maintaining a familiar interface.
The open-source project is built on the Galoy Lightning platform. Users with custodial accounts are encouraged to review the 2FA settings and enable an authenticator. Self-custodial users should confirm that a recent cloud backup (or manual emergency bundle download) exists.
Full technical details, including the complete list of minor fixes, are available in the official announcement and the corresponding GitHub release.
The update is live on both major app stores. Support remains available at support@blink.sv.