Open-source LN wallet — connect to your own LND/CLN/Eclair node or use embedded LSP.
Best evidence tier. Signup tested end-to-end by xmr.club curator — deposit + withdrawal + edge cases. No-KYC posture verified at retail volume. Last_verified within 12 months.
Full rubric + 7-step verification walkthrough at /methodology.
Zeus is the default privacy-respecting Lightning Network wallet for users who want sovereignty over their own node. Connect to your own LND, CLN, or Eclair node remotely (over Tor or clearnet), or use the embedded LSP for a faster get-started flow. The app is fully open-source (MIT, `github.com/ZeusLN/zeus`), available on iOS + Android + APK, and has been the canonical 'roll your own node' Lightning wallet for self-hosters since 2021.
Architecture and the two modes:
Zeus has two operating modes that map to two different threat models:
1. Remote-node mode (the original use case) — you run your own LND / Core Lightning / Eclair node somewhere (home server, VPS, OmniBolt-style box) and Zeus is a thin remote control over that node's gRPC/REST API. The app holds no keys, no funds, no channel state — everything lives on your node. Connection is via REST + macaroon or LNC (Lightning Node Connect) for NAT traversal. Tor support is built-in. This is the sovereignty-maxing mode and what earns Zeus its A grade.
2. Embedded LSP mode (the 'just works' flow) — added 2024+, Zeus runs a lightweight Neutrino client on-device with an embedded LND, and channels open via partnered Lightning Service Providers (Olympus Mobile, Lightspark, etc.). Custody of channel-state is on-device but liquidity provisioning + initial channel opens go through the LSP. This is the iOS-Phoenix-equivalent path for users who can't or won't run a node.
What you trust: in remote-node mode, only your own node infrastructure (Zeus is just a UI). In embedded mode, the integrity of the LSP relationship + on-device key custody (your phone). Both paths are non-custodial in the strict sense — your seed never leaves the device, your channels are yours.
Privacy posture: Tor-by-default for remote-node connections. No telemetry, no analytics, no signup, no email required. Zeus team is fully doxxed (Evan Kaloudis et al.) which is unusual in this space but a strength for a wallet — you know who built the code and who'll respond if there's a bug. The codebase has had third-party security review (Cure53 audit 2024).
Why we list at A: open-source MIT + non-custodial in both modes + remote-node-first design + Tor support + Cure53-audited + 5-year operating history + doxxed maintainer team + the canonical option for self-hosted LN sovereignty on mobile. There's no realistic downgrade vector unless the audit findings worsen materially or the LSP model drifts custodial.
Useful when you're running your own Lightning node and want a clean mobile UI for it, OR you want a non-custodial LN wallet for moderate sums where the on-device LSP path is acceptable, OR you want a wallet you can audit yourself before trusting with channel funds.
Compared to alternatives in the lightning subcategory:
Caveats:
Verdict: if you care about Lightning sovereignty + Monero ecosystem alignment (the team has been vocally pro-XMR and ships features like reverse submarine swap support that bridge LN↔XMR cleanly), Zeus is the wallet to use on mobile.
Free · LN routing fees only when self-hosted
Sourced from operator pages — verify identity via more than one channel before trusting time-sensitive instructions.
.onion mirror listed 2026-06-01 (<30d) No community reviews yet. Be the first below.
Honest, brand-neutral feedback welcome. A curator approves before it appears here. No JS required.
Silence censorship. Protect your privacy and bypass restrictions with Xeovo VPN. No email required.
Long-running no-KYC aggregator. XMR-friendly, Tor mirror, broad coin support.
Mobile + desktop multi-coin wallet (XMR, BTC, LTC, ETH) with in-app swap + CakePay.
Non-custodial cross-chain swap router with refund-on-refusal AML policy and multi-destination split swaps. No
Two-year-old no-account instant swap — in-house test swap settled in 3 minutes (0–1 conf), Trocador A privacy