Biscuit 1.1.1

Download Biscuit 1.1.1 for Windows, macOS (Apple Silicon and Intel) or Linux (AppImage, .deb, .rpm, Arch, .tar.gz). If you already use Biscuit, it will offer you the update. This is the biggest version yet: Ethereum, USDT and USDC arrive next to Monero, Bitcoin and Litecoin, and every coin besides Monero becomes optional.

Only the coins you want

A new wallet no longer has to take a Bitcoin and Litecoin seed. After your Monero seed, Biscuit asks which other coins you want, and you can tick none: Monero works on its own. The + next to the coins, on Send and Receive, adds one at any time. The first coin you add gets its 12 words; the next ones use the same words, so your paper already covers them.

A coin you haven't added doesn't show anywhere: not in the tabs, not in the status bar, not in the prices on Home. Any wallet can now be removed, the first one included, and a coin without a wallet leaves the tabs. Your existing wallets open as before, with Bitcoin and Litecoin.

Ethereum, USDT and USDC

Ethereum uses the same 12 words as Bitcoin and Litecoin, and the address most Ethereum wallets use, so it can be restored elsewhere. USDT and USDC are added one by one, on the same address, on the Ethereum network only (ERC-20).

On Ethereum, sending USDT or USDC costs a fee paid in ETH. Biscuit tells you when you add them, shows each fee in your currency, says in red when the network is busy and waiting would be cheaper, and lets you speed up a payment that waits too long. Balances come from public Ethereum nodes and the history from Blockscout, an open source explorer; you can set your own node and your own Blockscout in Settings › Network › Ethereum, and all of it works through Tor. Ethereum gets several wallets and an address book, as Bitcoin does. See Ethereum, USDT and USDC.

Swaps between any two coins

Exchange swaps no longer need Monero on one side: BTC to ETH, XMR to USDT, USDC to LTC, any two of the six coins. The refund always goes back in the coin you send. A coin you haven't added can still be swapped, to or from an address of yours elsewhere.

Smaller things

• The status bar shows what you hold, each coin under its own name, and Balance: 0 when everything is empty.
• Atomic swaps no longer look for makers as soon as you open the tab: they wait for Find makers.
• The converter lists USDT and USDC, and the prices on Home follow the coins you added.
• New pixel-art icons for Ethereum, USDT and USDC, and two new biscuits in the welcome banner.
• The status bar says Synchronized only once every coin is; until then it names the ones still catching up.
• On a Mac, clicking the bear in the menu bar no longer closes Biscuit.
• Consolidate small Bitcoin or Litecoin coins into one from the Coins tab, at the slow fee, and see which coins are dust: worth less than the fee to spend them.
• Max in ETH leaves almost nothing behind.
• Scan a QR code for the swap addresses, and Ethereum payment requests, USDT and USDC included, in Send.

As always, please verify your download before you install it.

Found a bug, or have an idea? Tell us.

Biscuit 1.0.12

Download Biscuit 1.0.12 for Windows, macOS (Apple Silicon and Intel) or Linux (AppImage, .deb, .rpm, Arch, .tar.gz). If you already use Biscuit, it will offer you the update.

This version fixes three security issues, found by checking Biscuit against the fixes in Monero GUI 0.18.5.3, released yesterday.

A node only gets its own login

If you connected to a Monero node that needs a username and password, such as your own, then switched to another node, Biscuit kept offering that login to the new one. A malicious node could ask for it and try to guess your password. Each node now only ever receives its own login, even if you switch quickly.

No more shortcuts around Tor

Biscuit reaches addresses on your own network directly, without Tor or your proxy, so that your node at home keeps working. It recognized them by how the name starts, so a public server named like 10.example.org was taken for one of yours and reached directly, and an Electrum server with such a name could even use an unencrypted connection. Now only real local addresses skip Tor: localhost, .local names and private IP addresses.

The converter tells the truth about rates

The Converter tab on Home said "No new exchange rates received for over 10 minutes" a few minutes after every start, and kept saying it, even while prices were arriving normally. It was checking a service Biscuit doesn't use. It now looks at when the prices were actually fetched, and only warns if they are more than 30 minutes old.

A stricter update check

Biscuit checks every update against our signed list of files before installing it. It now refuses signatures that claim any hash algorithm other than SHA-256, the one our releases are signed with.

Monero 0.18.5.3 itself also brings more protection against malicious nodes. It will come in a next version of Biscuit, once it's merged into the Monero code Biscuit is built on.

Biscuit is new, and in its first weeks we shipped fixes as soon as they were ready. From now on, releases will come every two weeks, sooner only for an urgent security fix.

Verify your download

Every file is listed with its SHA-256 checksum in hashes-1.0.12-plain.txt, signed with the Biscuit release key:

Biscuit Wallet releases
D714 332E 6101 C1DA AC60  E644 202F 1FA3 98DE CEFA

Releases are built with Guix from the source archive. How to check them: Verifying your download.

Found a bug, or have an idea? Tell us.

Biscuit 1.0.10

Download Biscuit 1.0.10 for Windows, macOS (Apple Silicon and Intel) or Linux (AppImage, .deb, .rpm, Arch, .tar.gz). If you already use Biscuit, it will offer you the update.

Tor mode means every connection

In Tor mode, the default for Monero nodes was "Switch to Tor after initial synchronization": a wallet far behind would catch up over a direct connection, then move to Tor. To know how far behind a wallet was, that setting relied on a service Biscuit doesn't use, so in practice every wallet synced outside Tor each time it was opened, and the node saw your IP address.

Tor mode now sends every Monero connection through Tor, from the start. If you use Tor mode, the update moves you to Always over Tor once. You can still choose the exception in Settings › Network › Proxy: it now works as it says, and only a wallet more than about 12 hours behind catches up directly. See Tor mode.

Our documentation, in the app

Help › Documentation (F1) and the help buttons in the wallet assistant showed pages written for Feather, the wallet Biscuit is built on. They now show Biscuit's own documentation, the same as on the website, and it works offline.

Why exchange swaps are off in Tor mode

Biscuit used to say that exchanges refuse Tor. The real reason: our swap partner requires us to record the IP address each exchange swap is created from, and a Tor address can't be traced, so our server refuses exchange swaps through Tor. Atomic swaps still work over Tor. See Exchange swaps.

Verify your download

Every file is listed with its SHA-256 checksum in hashes-1.0.10-plain.txt, signed with the Biscuit release key:

Biscuit Wallet releases
D714 332E 6101 C1DA AC60  E644 202F 1FA3 98DE CEFA

Releases are built with Guix from the source archive. How to check them: Verifying your download.

Found a bug, or have an idea? Tell us.