grapheneos / daniel micay / james donaldson

Tiffany Ng / Wired : How GrapheneOS lead developer Daniel Micay's legal fights with his former partner James Donaldson over CopperheadOS led to the privacy-focused tool's creation — There's a lot of love all over the world for GrapheneOS, the gold standard of mobile security. There's very little love between the two guys at the center of its history.

GrapheneOS says a WIRED piece republished long-standing fabrications by James Donaldson about the project's history and its founder, Daniel Micay. The statement accuses Donaldson of years of harassment, misrepresenting his role in Copperhead, stealing roughly $300,000 in Bitcoin donations, and profiting from forks while trying to claim credit. GrapheneOS says Copperhead was a failing, closed-source spin-off that held the project back; after separating in 2018 the open-source project grew to about 10 full-time developers funded by donations and structured as a non-profit, with Micay receiving income only via GitHub Sponsors. The response argues WIRED failed to verify claims, denied GrapheneOS adequate comment, and that Donaldson’s allegations lack merit and have been debunked. This matters because it concerns governance, funding, and reputational integrity of a security-focused open-source OS.

GrapheneOS says WIRED published a history of the project based on falsehoods from James Donaldson, who it accuses of years-long harassment, fabrications and theft. The statement alleges Donaldson stole about $300,000 in Bitcoin donations, misrepresented his role in Copperhead/GrapheneOS, and continued to litigate and promote a closed-source fork after the project split in 2018. GrapheneOS contrasts that past with its current success: the nonprofit GrapheneOS Foundation is donation-funded, employs roughly ten full-time developers, and founder Daniel Micay does not profit from the foundation. The post criticizes WIRED for not verifying Donaldson’s claims or seeking GrapheneOS’s factual account during reporting. This matters for open-source governance, project trust, and reputational risk in security-focused software.

GrapheneOS, a leading mobile privacy and security OS, was co-created by Daniel Micay, a polarizing but technically respected security researcher, and his former partner James Donaldson. The article traces their fraught relationship from early Toronto crypto meetups through the formation of privacy-focused Android projects (including Copperhead), revealing disputes over credit, control, and safety that culminated in legal and personal fallout. Interviews with the GrapheneOS team, Donaldson, and associates paint Micay as brilliant yet guarded, and show how tensions among core contributors shaped the stewardship and public narrative of a project widely regarded as the gold standard for mobile security. The story matters because internal conflicts in critical open-source security projects can affect trust, governance, and long-term viability for users and downstream projects.