Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesBitchat, the Bluetooth-based messaging app associated with Jack Dorsey, launched in July 2025 with privacy and security ambitions. Within days, its own repository warned that the software had not received an external security review and should not be relied on for security. Security researcher Alex Radocea also reported that the app’s Favorites feature could allow an attacker to impersonate a trusted contact.
What happened with Bitchat?
TechCrunch reported on July 9, 2025 that Bitchat’s GitHub repository carried a warning saying the software had not received external security review, could contain vulnerabilities and might not meet its stated security goals. The notice advised against production use and relying on the app’s security.
According to TechCrunch, that warning was not present when Bitchat debuted. It was added through pull request commit d296f1d, titled “Add warning to readme.” Futurism then published the headline about the snag on July 12, 2025.
“This software has not received external security review and may contain vulnerabilities and does not necessarily meet its stated security goals. Do not use it for production use, and do not rely on its security whatsoever until it has been reviewed.”
Free tools Windows power users keep installed
One-click scans. No signup required.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.#1 Best Overall
Sale
Samsung Galaxy A17 5G Smart Phone 128GB US 1 Yr Manufacturer Warranty Black
- YOUR CONTENT, SUPER SMOOTH: The ultra-clear 6.7" FHD+ Super AMOLED display of Galaxy A17 5G helps bring your content to life, whether you're scrolling through recipes or video chatting with loved ones.¹
- LIVE FAST. CHARGE FASTER: Focus more on the moment and less on your battery percentage with Galaxy A17 5G. Super Fast Charging powers up your battery so you can get back to life sooner.²
- MEMORIES MADE PICTURE PERFECT: Capture every angle in stunning clarity, from wide family photos to close-ups of friends, with the triple-lens camera on Galaxy A17 5G.
- NEED MORE STORAGE? WE HAVE YOU COVERED: With an improved 2TB of expandable storage, Galaxy A17 5G makes it easy to keep cherished photos, videos and important files readily accessible whenever you need them.³
- BUILT TO LAST: With an improved IP54 rating, Galaxy A17 5G is even more durable than before.⁴ It’s built to resist splashes and dust and comes with a stronger yet slimmer Gorilla Glass Victus front and Glass Fiber Reinforced Polymer back.
The warning does not prove that Bitchat caused a breach or that users were attacked. It does mean the project itself was telling users not to treat its security claims as established.
How the Favorites identity flaw could enable impersonation
Radocea’s July 7, 2025 technical post focused on how Bitchat verifies contacts saved as Favorites. His account said the protocol used an identity key, but failed to cryptographically authenticate the ephemeral key material used in a session.
Rank #2
- Carrier: This phone is locked to Tracfone, which means this device can only be used on the Tracfone wireless network. Tracfone plan required, activating is easy, just 3 steps.
- DISPLAY: Immersive viewing on a 6.7-inch super-bright 120Hz display with powerful stereo speakers and Bass Boost for cinematic entertainment.
- CAMERA SYSTEM: Advanced 50MP Quad Pixel camera captures sharp, detailed photos and videos in any lighting condition
- PERFORMANCE: Lightning-fast 5G connectivity paired with a powerful processor and RAM Boost for smooth multitasking.
- BATTERY LIFE: Long-lasting 5000mAh battery with TurboPower charging technology delivers hours of power in minutes.
In the scenario he described, an attacker could present a victim with a legitimate-looking identity key while supplying an ephemeral key pair controlled by the attacker. The victim’s client could then treat the attacker as a trusted Favorite. Radocea characterized this as a possible man-in-the-middle impersonation path.
That is a protocol-level identity problem, not evidence that every Bitchat conversation was intercepted. Radocea wrote that the identity-key system was “only decorative as implemented” and accompanied by misleading security claims. He also warned TechCrunch that people could take the security messaging literally and rely on the project for their safety.
Rank #3
- YOUR CONTENT, SUPER SMOOTH: The ultra-clear 6.7" FHD+ Super AMOLED display of Galaxy A17 5G helps bring your content to life, whether you're scrolling through recipes or video chatting with loved ones.¹
- LIVE FAST. CHARGE FASTER: Focus more on the moment and less on your battery percentage with Galaxy A17 5G. Super Fast Charging powers up your battery so you can get back to life sooner.²
- MEMORIES MADE PICTURE PERFECT: Capture every angle in stunning clarity, from wide family photos to close-ups of friends, with the triple-lens camera on Galaxy A17 5G.
- NEED MORE STORAGE? WE HAVE YOU COVERED: With an improved 2TB of expandable storage, Galaxy A17 5G makes it easy to keep cherished photos, videos and important files readily accessible whenever you need them.³
- BUILT TO LAST: With an improved IP54 rating, Galaxy A17 5G is even more durable than before.⁴ It’s built to resist splashes and dust and comes with a stronger yet slimmer Gorilla Glass Victus front and Glass Fiber Reinforced Polymer back.
The disclosure and response timeline
| Date | Event |
|---|---|
| July 7, 2025 | Alex Radocea published his technical analysis of the Favorites identity-verification weakness. |
| July 9, 2025 | TechCrunch reported the repository warning, the reported impersonation path and other launch-era security concerns. |
| After the initial report | Radocea said he filed a GitHub issue. TechCrunch reported that Dorsey marked it completed without comment, then reopened it with guidance to report security issues on GitHub. |
| July 12, 2025 | Futurism published the headline article describing the embarrassing snag. |
Other security questions raised at launch
TechCrunch reported concerns about whether Bitchat’s forward-secrecy claim was implemented correctly. It also mentioned a potential buffer overflow. The available reporting does not establish that either issue was exploited.
These concerns matter because Bitchat was presented as a private messenger operating without centralized internet infrastructure. Bluetooth-based, decentralized operation can be useful in disconnected or disrupted environments, but those design choices do not substitute for tested authentication and an independent review.
Rank #4
- PRIVACY DISPLAY: Automatically hide your screen from those beside you. The built-in privacy display can be preset¹ to turn on when receiving notifications, typing passwords, or using specific apps
- TYPE IT IN. TRANSFORM IT FAST: Enhance any shot in seconds on your smartphone by using Photo Assist² with Galaxy AI.³ Add objects, restore details, or apply new styles by simply typing or tapping
- NIGHTS, CAPTURED CLEARLY: From gigs to city lights, record and capture moments after dark with clarity using Nightography so your photos and videos stay crisp and clear on your Samsung Galaxy
- MAKE IT. EDIT IT. SHARE IT: Turn everyday moments into something personal with creative tools built right into your mobile phone, whether it’s a special contact photo, custom wallpaper, an invitation or more⁴
- HELP THAT KEEPS UP: Stay in the moment while Now Nudge with Galaxy AI helps you respond faster and stay organized with smart suggestions⁵ that appear exactly when you need them on your phone
Did Bitchat fix the problem?
Radocea later updated his post to say Bitchat had added an under-development/security-review label and was moving to implement end-to-end cryptography with Noise. That is evidence of a reported development change after his original analysis.
It is not the same as a completed independent audit, a formal assurance that the Favorites flaw was eliminated, or proof that the current release is secure. The sources available for this article do not establish Bitchat’s repository status, latest code or audit status in September 2026.
Best Value
- Carrier: This phone is locked to Tracfone, which means this device can only be used on the Tracfone wireless network. Activating is easy, just 3 steps.
- ACTIVATION Promotion: Includes 1500 min, 1500 texts & 1500 MB Data + add more as you need it
- CAMERA SYSTEM: 50MP Quad Pixel camera. Capture sharper, more vibrant photos day or night with 4x the light sensitivity.
- PERFORMANCE: Blazing-fast Qualcomm performance. Get the speed you need for great entertainment with a Snapdragon 680 processor and 4GB of RAM.
- 64GB built-in storage. Get plenty of room for photos, movies, songs, and apps. Made for US
Is Bitchat secure to use?
The defensible answer depends on the date and the evidence. In July 2025, the project’s own warning said users should not rely on its security, and Radocea had described a plausible contact-impersonation weakness. Those facts justify treating the launch version as experimental rather than as a safety-critical messenger.
They do not justify declaring that Bitchat remains insecure today. Anyone considering it should check the current repository, release notes and any publicly documented, independent security review rather than relying on the 2025 launch claims or the later mention of Noise alone.
What this means for users
- Do not use the July 2025 launch build for situations where mistaken identity could endanger someone.
- Do not assume that a contact shown as a Favorite has been cryptographically authenticated unless current documentation demonstrates how that binding works.
- Separate a protocol design update from an external audit; they answer different questions.
- Treat claims about privacy, forward secrecy and end-to-end encryption as claims that require implementation evidence and review.
The Bottom Line
Bitchat’s embarrassing snag was a launch-era security warning and a researcher-reported Favorites impersonation weakness—not a documented breach. The July 2025 evidence supports caution, while the app’s security status in September 2026 remains unverified by the sources available here.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →
