Browser tabs open on The Orange Pages (two tabs count as two). Each tab gets a random number in your browser; it is never linked to you or your IP, and it is deleted once the day's total is counted, a few hours after midnight (UTC). Only the daily totals are kept.
Free to list · no ads · no paid placements
Free directory · free to list · submissions welcome · no ads · no paid placements. No cookies, no accounts, no IP logging by us. Visits are counted by Cloudflare Web Analytics and by our own counter of random tab numbers.
Page
18 listings: ways for a business to accept and move bitcoin — payment processors and gateways, point-of-sale and invoicing tools, Lightning payment APIs, and fiat on- and off-ramps.
All 18 are in the ₿ USE · TOOL group. 14 support Lightning and 6 are open source. Who holds the bitcoin is stated for all 18: 8 Custodial, 5 Non-Custodial, 5 with a custody line instead of a class. 3 carry a notice. 1 also appears under Bitcoin Companies and Exchanges & On-Ramps.
18 listings, grouped Bitcoin first by label. Inside each group: open source first, then the rest, then listings marked Not recommended, each A to Z here (the interactive directory rotates them weekly). Nothing is hidden. This version needs no JavaScript. Most recent Updated date here: 23 October 2026 (the day a record last changed, not a verification date).
How listings are checked → · Using Bitcoin (Section 5) →
Bitcoin used directly as money, or tools for running, securing and building on it.
Alby ₿ USE
Lightning wallet and payments for the web.
Custody. Alby’s home page describes Alby Hub as “Self-custody in the cloud”, keeping “full control over your keys”; its pricing page is titled “Cloud & Self-Hosting Plans”. Alby: Home
Blink ₿ USE
Bitcoin and Lightning wallet with custodial and non-custodial accounts.
Custody. In Custodial Mode, Blink “holds and manages” your bitcoin. In Non-Custodial Mode, your bitcoin sits on the Spark protocol under your own recovery phrase, and Blink has “no custody, access, or control”; its terms say Spark is designed so that no single operator can reach your funds alone, and list operator collusion as a risk. Blink’s June 2026 launch post says the exit to the Bitcoin main chain is supported by the protocol but not yet in its app. Blink: Terms & Conditions v2.6 (sections 1, 7, 8.4 and 12)
Advisory · CUSTODIAL ACCOUNTS ATTACKED on 19 September 2026 — about 6.61 BTC taken; Blink says every affected balance was restored (2026-10-14)
On 19 September 2026 an attacker used a flaw in Blink’s admin tools to take over 35 custodial accounts and withdraw about 6.61 BTC from 24 of them, according to Blink. Blink says the flaw had been open since October 2023, that it switched its custodial service off for nearly eight hours that day, and that it closed the flaw the same day. Blink says it restored every affected balance on 24 September, with fees refunded, using an interest-free loan from its shareholders. It says the coins came from its hot wallet, that its cold storage and non-custodial accounts were not reached, and that none of the 24 accounts that lost bitcoin had two-factor authentication on. Blink’s post-mortem of 3 October says the attacker also read details of 3,817 accounts, for some a phone number or email address, but not names, ID documents, passwords or seed phrases. Blink has filed criminal complaints in El Salvador and Próspera ZEDE and says it does not expect the money back; on 8 October it said its bounty for recovered coins stands.
Our position: listed, with this notice, because Blink says “no customer bears any loss” and has published what happened and what it changed. The attack hit Blink’s custodial service. If you keep a custodial Blink balance, Blink asks you to turn on two-factor authentication. The facts above come from Blink’s own post-mortem (3 October 2026), its update of 8 October 2026 and its GitHub security advisory (6 October 2026) — check them yourself.
Sources: Blink: “The September 19 Attack” post-mortem (3 October 2026) · Blink: “Phase two: following the coins in public” (8 October 2026) · GitHub security advisory GHSA-w9wx-p7xr-7jvp (published 6 October 2026)
Breez ₿ TOOL
Bitcoin in every app.
Custody. Breez says its SDK is non-custodial and built on Spark. Spark says its operators help sign transfers but cannot move funds without you, and a pre-signed exit lets you reclaim funds on Bitcoin L1. Spark says one honest operator keeps funds secure, and lists all operators colluding with a previous owner to double-spend as a risk. Spark: What is Spark? A Bitcoin Layer 2 Built on Statechains (5 Jan 2026)
Advisory · MISTY BREEZ STOPPED — Breez tells its users to move their funds out (14 September 2026) (2026-10-12)
On 14 September 2026 Breez posted that the service its Misty Breez wallet relies on is no longer available, so on-chain and Lightning payments can't be made in that app. Breez says the Liquid Network is running again and users can now move their funds out: send them with a Liquid address to another Liquid wallet (Breez names Aqua) and do a Lightning swap from there, or use an external service that converts Liquid bitcoin (L-BTC) to on-chain bitcoin. Breez says it does not run or endorse these services and tells users to check their fees, limits and terms themselves. Breez gives no deadline. On 12 October 2026 Liquid's own website said "LBTC peg-out operations remain paused." If you still hold funds in Misty Breez, move them to a wallet you control.
Our position: listed, with this notice. Misty Breez is one Breez app; the Breez SDK and the Glow app are separate products. The facts above come from Breez's own Misty Breez page and Liquid's website — check them yourself.
Sources: Breez: Misty Breez (14 September 2026) · Liquid: peg-out status (liquid.net, checked 12 October 2026)
BTCPay Server ₿ USE
Self-hosted, open-source Bitcoin payment processor.
Non-Custodial. Only you hold the keys to your bitcoin. BTCPay Server: General FAQ
Coinos ₿ USE
Open-source Bitcoin and Lightning web wallet for merchants.
Custodial. Coinos says you always have the option of taking custody of your funds by withdrawing instantly at any time. Coinos: Home
Advisory · LIQUID PEG-OUTS PAUSED since 6 September 2026 — about 602 BTC not yet recovered, no reopening date (2026-10-12)
Blockstream’s help centre lists Coinos as a web wallet for sending and receiving L-BTC and other Liquid assets. On 6 September 2026 an attacker used a bug in Elements, the software Liquid runs on, to create about 4,000 L-BTC with no bitcoin behind it, then withdrew about 4,000 BTC from the Liquid reserve through SideSwap, a federation member that can authorise peg-outs. Blockstream says the reserve fell from about 4,205 BTC to 197 BTC, that 3,400 BTC were returned on 7 September, and that about 602 BTC are still the subject of recovery efforts; on 12 October 2026 the third-party explorer liquid.network (The Mempool Open Source Project) showed about 3,632 BTC in the reserve against about 4,235 L-BTC in circulation. Blockstream’s co-founder and CEO, Adam Back, wrote on X on 10 September that the 1:1 peg would be covered (“answer YES”); he did not say how or when. Blockstream deployed an emergency patch within hours, Liquid transactions resumed on 10 September, and Blockstream says other Liquid-issued assets were not affected. Peg-outs (the way to turn L-BTC back into bitcoin through the federation) remain paused; liquid.net still said so on 12 October 2026. On 17 September Liquid said it could not yet give a firm date and that peg-outs “will resume only after full 1:1 BTC backing for LBTC has been confirmed and all required software updates, testing and independent security reviews have been completed.” On 29 September it said an independent external security audit of Elements v23.3.4 was underway and that the federation was updating its peg-out key list, replacing existing entries and securing all peg-out keys in cold storage; it said it expected to share further updates “shortly”, and by 12 October it had posted none.
Our position: listed, with this notice, because Liquid still runs and Blockstream and Liquid have published what happened and what has to happen before peg-outs reopen. Until peg-outs reopen, L-BTC cannot be turned back into bitcoin through the federation; bitcoin held on-chain is separate and not affected. The facts above come from Blockstream’s incident report and help centre, posts on X by Liquid and Adam Back, liquid.net and the liquid.network explorer — check them yourself.
Sources: Blockstream: “Liquid Network Security Incident Assessment” (23 September 2026) · Blockstream help centre: “Get a Liquid wallet” (checked 12 October 2026) · Liquid Network on X: update of 29 September 2026, 05:48 UTC (audit of Elements, new peg-out keys)
LNbits ₿ USE
Open-source Lightning accounts and extensions platform.
Custody. LNbits says it can be run “for yourself, for others, or as part of a stack”; its site lists LNbits Hosted (“Fully managed”), a local LNbits Box and a run-it-yourself option. LNbits: Home
Banxa ₿ USE
Fiat-to-crypto payment provider, part of OSL Group.
Non-Custodial. Banxa’s terms say it does not host wallets or act as a custodian of Crypto Assets and delivers purchases to your Nominated Wallet Address, but also that its agent role may include holding assets on your behalf. Banxa: Customer terms and conditions (PDF, effective 10 Mar 2026)
BitPay ₿ USE
Bitcoin payment processor for merchants, running since 2011.
Custodial. BitPay’s terms say account ledger credits are “funds temporarily held by BitPay until settlement” and that BitPay does not “provide cryptocurrency custody as part of the Acceptance Services.” BitPay: Terms of use
CoinGate ₿ USE
Accept Bitcoin and Lightning payments.
Custodial. CoinGate says merchants hold a balance with it, paid out weekly by default on the Standard plan; merchants can instead choose to receive crypto directly. CoinGate: Digital asset custody
IBEX ₿ USE
Settlement and clearing engine for fiat and digital assets.
Custodial. IBEX’s Hub terms say a client’s balance is “a credit right against IBEX”, that IBEX “may hold its clients' assets on a pooled (omnibus) basis”, and that safekeeping may be subcontracted to custodians. IBEX: IBEX Hub Terms & Conditions (last updated 14 Sep 2026)
Lightspark ₿ USE
API for moving money across fiat, stablecoins and Bitcoin.
Custodial. Lightspark’s docs say internal accounts are Lightspark-managed accounts that hold customer funds; its site says Lightspark and its affiliates “are not banks, exchanges, or asset custodians.” Lightspark docs: Account model
Mercuryo ₿ USE
Crypto on- and off-ramp for wallets and exchanges.
Custody. Mercuryo’s terms differ by region: its US terms say it “does not provide custody, management or wallet-hosting services for Crypto Assets” and ask for “an external wallet address to receive any purchased Crypto Assets”; its Global terms describe a crypto wallet “maintained and operated by Mercuryo”. Mercuryo: Terms of Service (index of the US, EEA and Global versions)
OpenNode ₿ USE
Bitcoin and Lightning payment gateway.
Custodial. OpenNode says you move bitcoin from your OpenNode account to an external wallet, by a scheduled weekly transfer (opt-in, Sundays) or on demand. OpenNode Help: Bitcoin withdrawals
Simplex (by Nuvei) ₿ USE
Fiat-to-crypto payments infrastructure.
Non-Custodial. Simplex’s terms say it “does not take possession or control of your Crypto”; its help page says some platforms ask for an address you control, while others generate one if you have an account with them. Simplex: Payment terms (last updated 30 Mar 2026)
Speed ₿ USE
Bitcoin Lightning payments at global scale.
Custodial. Speed’s terms say Speed itself “does not custody user crypto assets”; custody is provided by CoinX USA or its contracted custodians, and CoinX may use omnibus wallets, custodial partners or segregated accounts. Speed: Terms and conditions
Strike ₿ USE
Instant, global Bitcoin payments.
Custodial. The company holds the keys to your bitcoin. Strike: US individual terms (Bitcoin Custody)
Transak ₿ USE
Fiat-to-crypto on-ramp infrastructure.
Non-Custodial. Transak’s terms say “you cannot hold Digital Assets with Transak”; purchases are sent to your Designated Wallet, and for a sale you transfer the crypto to a wallet Transak assigns for the order. Transak: Terms of service (Rest of World)
Zaprite ₿ USE
Bitcoin invoicing and checkout for businesses.
Non-Custodial. Zaprite says it is “not a custodian” and “never touches customer funds”; payments go to the wallet, or the bitcoin custody or financial-provider account, that the merchant connects. Zaprite: FAQ