Skip to content

v0.1.7 (Android versionCode 35)

Latest

Choose a tag to compare

@CypherBoxLLC CypherBoxLLC released this 13 Aug 11:40
· 159 commits to main since this release
v0.1.7-vc35
f43a869

Cypher Box 0.1.7 (Android versionCode 35, iOS build 18).

Bark Vault (Ark)

  • Engine upgrade: migrate to @secondts/bark-react-native 0.15.0 (bark core 0.6.0), then 0.6.1 (0.16.1).
  • Emergency Exit: fee-reserve soft gate with a break-glass "start exit anyway", esplora open fallback so a bot-blocked provider no longer wedges the wallet, and keep the auto-backup running during an exit so the local backup stays fresh mid-exit.
  • Refresh: funds stay spendable during a refresh (bark 0.6.0), auto-refresh received capsules gated on the SDK estimate, foreground maintenance sweep + arkoor exit-runway guard, delegated background-maintenance wake.
  • Dust: one-tap dust consolidation + capsule refresh UX, accurate dust status on the home banners, corrected capsule refresh fee rule and stale fee URL.
  • Reminders and copy fixes; capsule reminders acquire their own push token; corrected expired-capsule copy; protect arkoor capsules from silent expiry.
  • Updated in-app capsule guide; "Learn more" opens our own how-to guide.

Hot Vault

  • Optional dice/coin entropy and an optional BIP39 passphrase on create and recover.

CoinOS

  • Withdraw fee selector falls back to the blockstream esplora, then static tiers, when mempool.space is unavailable.

Strike

  • Consolidate to the one working login flow, drop the offline_access scope, revoke the access token on disconnect.

Android

  • Ship arm64-v8a only to stop the 32-bit launch crash.

Privacy / Terms of Service

  • Gate the on-chain address subscription behind explicit consent.
  • Publish the Bark Vault terms and align with Second's ToS; disclose the optional dice entropy and BIP39 passphrase; ToS version bumped to 2026-08, so existing users are prompted to review and accept.

Verification

  • Source commit: f43a86969dbcb6cc1ef59488ac74a71078a1a359
  • Tag: v0.1.7-vc35 (GPG-signed)
  • Reproducible build verified: build-verify built the AAB twice and the SHA-256s matched.
  • Unsigned real-config AAB SHA-256: 98c6b31f68adcff480d64f6386ff3e71f6520d8b0091c2e0916c5dcc10a78360
  • CI-reference (no-secrets) AAB SHA-256: b3f4f4bd72b7782efcaf7a51d93f21746ee8c196f108794c444383a1ac3c76d1
  • Build instructions: see BUILD.md. The Play binary is signed locally with a hardware-protected key; the CI artifact is unsigned and never shipped.