Skip to content

EdgeChangeLog.md

Latest commit

 

History

History
70 lines (54 loc) · 3.09 KB

EdgeChangeLog.md

File metadata and controls

70 lines (54 loc) · 3.09 KB
Raw

Change Log

Warning: Edge Version

- This preview version of firmware has not yet been qualified
- and tested to the same standard as normal Coinkite products.
- It is recommended only for developers and early adopters
- for experimental use.

This lists the changes in the most recent EDGE firmware, for each hardware platform.

Shared Improvements - Both Mk4 and Q

  • New Feature: Added USB ncry v3 authenticated encryption with direction-separated keys and replay protection
  • Enhancement: Warn when a transaction's block-height nLockTime is more than ten years beyond the Bitcoin block height known to the firmware.
  • Bugfix: Reject malformed PSBTs containing P2SH-P2WSH inputs with a missing or incorrect redeem script, preventing transactions with an unknown fee from proceeding to approval.
  • Bugfix: Reject foreign inputs from BIP-322 Proof of Reserves, including inputs disguised with forged key-path metadata or partial signatures.
  • Bugfix: Add a block-height reset to Single-Signer Spending Policy's Last Violation screen after policy bypass, matching CCC.
  • Enhancement: Retain up to 128 UTXO cache entries across restarts.
  • Bugfix: Cancelled PSBTs no longer persist claimed input amounts to the UTXO cache; amounts are committed only after signing, for inputs actually signed.
  • Bugfix: Cache single-sig segwit change amounts at finalize, so understated input amounts are caught instead of silently trusted.
  • Bugfix: Reject PSBTv2 transactions with an out-of-range transaction version, matching the PSBTv0 parser. Previously a v2 PSBT with an invalid nVersion could be approved and signed, producing a transaction the network will not relay.
  • Bugfix: Reject non-ASCII BIP-39 passphrases (USB, saved-passphrase recall, and note/password lanes) instead of silently deriving a wallet incompatible with BIP-39-normalizing software.
  • Bugfix: In Delta Mode, wipe the seed if anyone tries to view or activate a duress wallet's secret from the Trick PINs menu, instead of revealing it. Browsing the menu itself still works, so Delta Mode continues to look like normal operation.
  • Bugfix: Reject firmware images that extend past the world-checksum-covered flash region.
  • Bugfix: Reject PSRAM virtual-disk files whose FAT metadata is inconsistent with the declared file size (oversized cluster chains, oversized fragment counts, spurious trailing fragments, final remainders exceeding the final fragment's capacity, or filesystems with more than one sector per cluster), fixing an integer underflow in psram_copy_file/psram_mmap_file that allowed out-of-bounds PSRAM writes, reads, and mappings from a compromised USB host.
  • Bugfix: Fix device crash when message-signing input is valid JSON but not an object (NFC / QR / SD .json file). Thanks to @Amiga500.

Mk4 Specific Changes

6.6.2X - 2026-0x-xx

  • all of the above
  • synced with master up to and including 5.6.2

Q Specific Changes

6.6.2QX - 2026-0x-xx

  • all of the above
  • synced with master up to and including 1.5.2Q

Release History