Dinero v8.0.6

Block-download stall fix + the first >50k AssumeUTXO fast-sync anchor.

Highlights

• #327 — block-download stall fix: phantom-in-flight feedback + CSN bridge-eligible peer-selection guard + a stall watchdog. Fixes the "synced but frozen" mid-IBD stall that could leave a node stuck with healthy peers.
• #329 — height-52066 AssumeUTXO anchor; the macOS wallet now bundles the snapshot and fast-syncs from it on a fresh datadir instead of syncing from genesis (closes the mac side of #328). Fresh installs reach the tip in minutes.

macOS (arm64) — signed, notarized, stapled

• Dinero-v8.0.6-macOS-arm64.dmg — desktop wallet (bundles the 52066 snapshot for fresh-install fast-sync)
• Dinero-v8.0.6-macOS-arm64-qt.zip — .app zip
• dinero-operator-v8.0.6-macOS-arm64.tar.gz — headless operator stack
• SHA256SUMS-macos-8.0.6

AssumeUTXO snapshot

• utxo-snapshot-52066.dat — SHA256 43c6b2929c6f0a908adab94cd3020489a1188d358a14cdcbe0f52ed4d0073b78, base 52066, 153,812 UTXOs (verified against the compiled-in trust anchor at load)

Windows / Linux

Binaries for these platforms are being added to this release shortly. Until then, use the prior release for Windows/Linux.

🤖 Generated with Claude Code

Dinero v8.0.5

Dinero v8.0.5

Stable point release on top of v8.0.4.

Source commit: 72e5e2ad (tag v8.0.5)

What changed since v8.0.4

Shielded-wallet correctness fixes (Qt + wallet; no consensus change):

• Network-aware HRP in Send-shielded labels (#320). The shielded Send UI now shows only the address prefix for the active network instead of all HRPs.
• Reject too-low explicit shielded fee up front (#322). An explicit shielded fee below the floor is now rejected before the spend is persisted, rather than failing later.
• Stop re-appending chain leaves on rescan; heal drifted wallets (#324). Rescans no longer re-append already-known chain leaves, and drifted wallets are healed by recomputing the position-dependent nullifier.

Assets

• Windows x86_64: built on the dedicated Windows/CUDA machine — Dinero-8.0.5-windows-x86_64-Setup.exe (user/GUI, bundles SV2 miners), Dinero-Server-8.0.5-windows-x86_64-Setup.exe (headless, GPU-free, verified no CUDA load-time imports; bundles the height-47176 AssumeUTXO snapshot for faster first sync), dinero-v8.0.5-windows-x86_64-msvc.zip (operator stack), and SHA256SUMS-windows-8.0.5. Daemon embeds 8.0.5 + 72e5e2ad + OpenSSL 3.5.6 + ngtcp2 (QUIC on).
• macOS / Linux: added by the platform build hosts.

Verify (Windows): sha256sum -c SHA256SUMS-windows-8.0.5; git verify-tag v8.0.5.

🤖 Generated with Claude Code

Dinero v8.0.4

Dinero v8.0.4

Stable point release on top of v8.0.3.

Source commit: ecab1799 (signed tag v8.0.4)

What changed since v8.0.3

• daemon: RPC binds reliably on long-running nodes (#317). On a node with a large chaindb (1200+ RocksDB SST files) or many wallets, the daemon's open file-descriptor count could exceed FD_SETSIZE (1024). The RPC accept loop used select(), which cannot handle a listen-socket fd ≥ 1024 — it failed instantly and the RPC listener silently died, so the GUI showed "The Dinero daemon (dinerod) exited before the wallet could connect." Fixed two ways: ChainDB now caps RocksDB max_open_files (was unlimited), and the RPC loop uses poll() instead of select(). Verified on an affected datadir (open FDs 1048 → 189, RPC binds, getblockcount responds).

Carried from v8.0.3: reorg-candidate wedge fix (#310), ASERT snapshot-resync difficulty fix (#315), height-47176 anchor (#311), FD_CLOEXEC fix (#312).

Assets

• macOS arm64: signed, notarized, stapled DMG / Qt zip / operator tarball, SHA256SUMS-macos.
• AssumeUTXO snapshot: utxo-snapshot-47176.dat.
• Linux x86_64: to follow (build host temporarily unavailable; install.sh serves the v8.0.3 Linux build until then).
• Windows x86_64: built on the dedicated Windows/CUDA machine — Dinero-8.0.4-windows-x86_64-Setup.exe (user/GUI, bundles SV2 miners), Dinero-Server-8.0.4-windows-x86_64-Setup.exe (headless, GPU-free, verified no CUDA load-time imports; now bundles the height-47176 AssumeUTXO snapshot for faster first sync), dinero-v8.0.4-windows-x86_64-msvc.zip (operator stack), and SHA256SUMS-windows-8.0.4. Daemon embeds 8.0.4 + ecab1799 + OpenSSL 3.5.6 + ngtcp2 (QUIC on).

Verify: shasum -a 256 -c SHA256SUMS-macos-8.0.4; git verify-tag v8.0.4.

🤖 Generated with Claude Code

Dinero v8.0.3

Dinero v8.0.3

Stable point release on top of v8.0.2 — two consensus fixes, both Windows-verified and proven on a ~5.5h live fleet canary.

Source commit: c14572353 (signed tag v8.0.3)

What changed since v8.0.2

• consensus(reorg) — #310 (fixes #309): a miner whose tip block loses the chainwork race no longer wedges on its own minority fork. The node now reorgs to the higher-work P2P-learned branch (whole-branch-data candidate eligibility + body-position metadata for store-only blocks), marks consensus-invalid speculative branches failed (operational faults are never marked → no false-fork), and restores the pre-reorg tip if a reorg aborts.
• consensus(asert) — #315 (fixes #314): getblocktemplate no longer returns too-easy ASERT difficulty on an AssumeUTXO-snapshot-resynced node. The anchor-time fallback now uses block 1's real timestamp instead of genesis.nTime, so the template matches validation regardless of background-backfill state (solo blocks are no longer rejected bad-diffbits).

Also carried from v8.0.2: the height-47176 fast-sync anchor (#311) and the daemon FD_CLOEXEC listen-socket fix (#312, the GUI "daemon exited before the wallet could connect" bug).

Assets

• macOS arm64: signed, notarized, stapled DMG / Qt zip / operator tarball, SHA256SUMS-macos.
• AssumeUTXO snapshot: utxo-snapshot-47176.dat (verified against the compiled-in anchor).
• Linux x86_64: to follow — the Linux build host is temporarily unavailable; the full server/operator/GUI matrix + .deb will be added to this release shortly. Until then, install.sh continues to serve the v8.0.2 Linux build.
• Windows x86_64: built on the dedicated Windows/CUDA machine and attached — Dinero-8.0.3-windows-x86_64-Setup.exe (user/GUI, bundles SV2 miners), Dinero-Server-8.0.3-windows-x86_64-Setup.exe (headless, GPU-free, verified no CUDA load-time imports), dinero-v8.0.3-windows-x86_64-msvc.zip (operator stack), and SHA256SUMS-windows-8.0.3. Daemon embeds 8.0.3 + c1457235 + OpenSSL 3.5.6 + ngtcp2 (QUIC on); daemon code identical to the canaried build.

Verifying your download

shasum -a 256 -c SHA256SUMS-macos-8.0.3
spctl -a -t open --context context:primary-signature -v Dinero-v8.0.3-macOS-arm64.dmg

The tag v8.0.3 is SSH-signed by Dinero Labs; verify with git verify-tag v8.0.3.

🤖 Generated with Claude Code

Dinero v8.0.2

Dinero v8.0.2

Stable point release on top of v8.0.1.

Source commit: 7b85fd489 (signed tag v8.0.2)
Tag: v8.0.2 (SSH-signed, Dinero Labs)

What changed since v8.0.1

• AssumeUTXO fast-sync anchor refreshed to height 47176 (#311). New nodes bootstrap closer to the chain tip. This release carries utxo-snapshot-47176.dat, verified against the compiled-in trust anchor (sha256 + base hash + Utreexo forest binding) before it loads.
• Daemon socket FD_CLOEXEC fix (#312, #295). The RPC (20998) and P2P (20999) listen sockets are now created with FD_CLOEXEC, so a spawned child (dinero-seeder) can no longer inherit them and squat the ports after the daemon exits. This fixes the GUI "The Dinero daemon (dinerod) exited before the wallet could connect" failure that hit fresh installs (an orphaned seeder holding the daemon's ports). Verified at the source via /proc/<pid>/fdinfo.
• Packaging: the macOS release-lane guard now accepts a git worktree (#308).

Everything else is unchanged from v8.0.1.

Assets

• Linux x86_64: server-safe dinerod (no GPU runtime in NEEDED), dinero-cli, Qt GUI, seeder, solo/gpu/stratum miners, full desktop bundle, dinero-core .deb, SHA256SUMS-linux.
• macOS arm64: signed, notarized, stapled DMG / Qt zip / operator tarball, SHA256SUMS-macos.
• AssumeUTXO snapshot: utxo-snapshot-47176.dat (base height 47176, sha256 d537408c09420d842015bc54473da62abe5ca9158f09a1f7582a55d7b9099985) — fast-sync bootstrap, verified against the compiled-in anchor.
• Windows x86_64: built on the dedicated Windows/CUDA machine and attached to this release — Dinero-8.0.2-windows-x86_64-Setup.exe (user/GUI, bundles SV2 miners), Dinero-Server-8.0.2-windows-x86_64-Setup.exe (headless, GPU-free, verified no CUDA load-time imports), dinero-v8.0.2-windows-x86_64-msvc.zip (operator stack), and SHA256SUMS-windows-8.0.2. Daemon embeds 8.0.2 + 7b85fd48 + OpenSSL 3.5.6 + ngtcp2 (QUIC on).

Verifying your download

# Linux / macOS
shasum -a 256 -c SHA256SUMS-<platform>-8.0.2
# macOS additionally: Gatekeeper should report "Notarized Developer ID"
spctl -a -t open --context context:primary-signature -v Dinero-v8.0.2-macOS-arm64.dmg

The tag v8.0.2 is SSH-signed by Dinero Labs; verify with git verify-tag v8.0.2.

🤖 Generated with Claude Code

Dinero v8.0.1

Dinero v8.0.1

Stable point release on top of v8.0.0.

Source commit: cf0e7c84 (signed tag v8.0.1)
Tag: v8.0.1 (SSH-signed, Dinero Labs)

What changed since v8.0.0

• rpc(economics): economics.getinfo now reports the real 120-second block time, derived from target_spacing, instead of a stale constant (#294).
• Desktop GUI: the wallet retries a transient daemon early-exit on startup instead of raising a false "daemon failed to start" alarm (#306).
• Windows portability: the daemon hang-watchdog's diagnostic log hint no longer pulls in a POSIX-only <unistd.h>/getpid() path under MSVC, so the Windows build now compiles directly from the tagged source (#305). Unlike v8.0.0, the Windows artifacts for this release are reproducible from the v8.0.1 tag.

Everything else — the complete AssumeUTXO trust model, shielded size-aware fees, stateless undo integrity, GUI lifecycle hardening — is unchanged from v8.0.0.

Assets

• Linux x86_64: server-safe dinerod (no GPU runtime in NEEDED), dinero-cli, Qt GUI, seeder, solo/gpu/stratum miners, full desktop bundle, dinero-core .deb, SHA256SUMS-linux.
• macOS arm64: signed, notarized, stapled DMG / Qt zip / operator tarball, SHA256SUMS-macos.
• Windows x86_64: built on the dedicated Windows/CUDA machine and attached to this release — Dinero-8.0.1-windows-x86_64-Setup.exe (user/GUI, bundles SV2 miners), Dinero-Server-8.0.1-windows-x86_64-Setup.exe (headless, GPU-free, verified no CUDA load-time imports), dinero-v8.0.1-windows-x86_64-msvc.zip (operator stack), and SHA256SUMS-windows-8.0.1. Daemon embeds 8.0.1 + cf0e7c8 + OpenSSL 3.5.6 + ngtcp2 (QUIC on).

Verifying your download

# Linux / macOS
shasum -a 256 -c SHA256SUMS-<platform>-8.0.1
# macOS additionally: Gatekeeper should report "Notarized Developer ID"
spctl -a -t open --context context:primary-signature -v Dinero-v8.0.1-macOS-arm64.dmg

The tag v8.0.1 is SSH-signed by Dinero Labs; verify with git verify-tag v8.0.1.

🤖 Generated with Claude Code

Dinero v8.0.0

Dinero v8.0.0

The first stable release of the Dinero v8 line.

Source commit: 7b882a7 (signed tag v8.0.0)
Tag: v8.0.0 (SSH-signed, Dinero Labs)

What v8 is

Dinero v8 is a privacy-capable, Utreexo-based cryptocurrency node with a complete AssumeUTXO trust model — fast now, prove in background, retire trust, fatal if dishonest: a new node bootstraps to the chain tip in minutes from a UTXO snapshot, then validates the entire history from genesis in the background, retires the trust assumption when the proof completes, and refuses to run (fatal) if the snapshot is ever shown to be dishonest.

Highlights since the rc line

AssumeUTXO trust model — complete and proven end-to-end:

• Fast snapshot bootstrap → foreground sync → background P2P body backfill → full genesis→base replay → trust-marker retirement (fully_validated) → legacy-mode exit. Below-base higher-work forks go fatal/safe-mode, never silently reorg canonical history.
• Validation↔backfill reconciliation (#298): a snapshot node whose background validation finds an unreadable pre-base body now deterministically re-derives its canonical hash and re-requests it, so it can never strand at validation_stalled — the lifecycle always reaches its terminal state. Includes a stall watchdog and a no-progress hang watchdog with named threads.

Consensus / wallet correctness:

• Shielded size-aware fees (#273): default-fee wallet.shield/unshield/transfer now measure the final transaction vsize and pay the mempool floor — previously every default-fee shielded send was silently unable to relay.
• Stateless undo integrity (#274): CSN/utreexo-stateless nodes reconstruct full-fidelity spent-coin undo from ChainDB rows, so a stateless tip can never become undisconnectable.

Operator & desktop:

• Linux Debian package restored and building from the release lane (#293).
• Desktop GUI now terminates its child daemon/seeder on quit, fails loud (no more silent hangs) if the RPC port is occupied or the daemon exits, and offers a move-to-Applications prompt when run from the DMG (#295).
• GUI default bootstrap seeds refreshed to the live fleet (SJ / NA / EU1).

Verification (this release)

• Full AssumeUTXO lifecycle e2e (validation_stalled → fully_validated → mode-exit → survives restart) green; mainnet fleet in block + shielded-state consensus on this code.

Assets

• Linux x86_64: server-safe dinerod (no GPU runtime in NEEDED), dinero-cli, Qt GUI, seeder, solo/gpu/stratum miners, full bundle, dinero-core .deb, SHA256SUMS-linux.
• macOS arm64: signed, notarized, stapled DMG / Qt zip / operator tarball, SHA256SUMS-macos.
• Windows x86_64: Setup + Server installers + msvc zip, SHA256SUMS-windows.
  • Provenance note: the Windows binaries are built from this signed tag plus a one-line, behavior-equivalent portability fix — the v8.0.0 source had a POSIX-only #include <unistd.h> in a daemon watchdog's diagnostic log-hint (getpid()) that does not compile under MSVC. The canonical fix is merged to dinero-main (#305) and is identical in effect (it only changes the text of one gdb-capture log line); runtime behavior matches the tag exactly. Because of this single guard, the Windows artifacts are not bit-reproducible from the v8.0.0 tag — a future tagged release will build them reproducibly.

Verifying your download

# Linux / macOS
shasum -a 256 -c SHA256SUMS-<platform>-8.0.0
# macOS additionally: Gatekeeper should report "Notarized Developer ID"
spctl -a -t open --context context:primary-signature -v Dinero-v8.0.0-macOS-arm64.dmg

The tag v8.0.0 is SSH-signed by Dinero Labs; verify with git verify-tag v8.0.0.

🤖 Generated with Claude Code

Dinero v8.0.0-rc38

Dinero v8.0.0-rc38 release candidate — the stable-gate promotion candidate.

Source commit: e752743
Tag: v8.0.0-rc38 (SSH-signed, Dinero Labs)

Highlights since rc37

AssumeUTXO trust model complete (fast now, prove in background, retire trust, fatal if dishonest):

• Mode exit shipped (#280, PR #283): replay-proven pre-base history is promoted into ChainDB, the exit gate fires, and snapshot-bootstrapped nodes fully retire assumed mode (assumeutxo_active → false). Below-base higher-work forks go fatal/safe-mode instead of reorging canonical history.
• Wallet send/spend safe-mode gating across all spend RPC surfaces (PR #282) and P2P body backfill for pre-base history (PR #272) round out the lifecycle.

Release blockers fixed:

• Shielded fee underpayment (#273, PR #285): default-fee wallet.shield/unshield/transfer now measure the final transaction vsize and pay the mempool floor — previously every default-fee shielded send was silently unable to relay. Responses expose fee_autosized + vsize.
• Stateless undo integrity (#274, PR #292): CSN/utreexo-stateless nodes persisted undo records with no spent coins, making tips undisconnectable (publish-invariant abort at the first spend block). Spent-coin lists are now reconstructed from ChainDB rows with full fidelity; stored undos are validated against every publish-invariant arm before reuse.

Fleet validation (this rc, live mainnet): four-node consensus (block + shielded state hash identical) on this exact commit; mainnet snapshot export → fresh-node bootstrap → foreground synced within minutes; background validation running.

Asset notes

• Linux: hermetic server-safe daemon (no OpenCL/CUDA in dinerod NEEDED set), Qt GUI, seeder, solo/gpu/stratum miners, full bundle, SHA256SUMS-linux.
• macOS arm64: signed, notarized, stapled DMG / Qt zip / operator tarball, SHA256SUMS-macos.
• Windows x86_64 (MSVC, vendored static OpenSSL 3.5.6 + QUIC=ON), built from this tag on the Windows/CUDA machine:
  • Dinero-8.0.0-rc38-windows-x86_64-Setup.exe — user desktop installer (Qt GUI + daemon + SV2 pool miners bundled).
  • Dinero-Server-8.0.0-rc38-windows-x86_64-Setup.exe — headless server installer; daemon verified to have no CUDA/NVRTC/OpenCL load-time imports (runs on GPU-less servers), bundles VC++ redist + AssumeUTXO snapshot.
  • dinero-v8.0.0-rc38-windows-x86_64-msvc.zip — headless operator stack (daemon, CLI, seeder, miners, SV2 miners).
  • SHA256SUMS-windows-8.0.0-rc38 — checksums for the three Windows artifacts.
• The Debian package (.deb) is intentionally absent from this cut: debian/rules invokes scripts/build-openssl-vendored.sh, which destroys the committed prebuilt OpenSSL headers on a clean checkout (release-engineering bug, tracked for the stable cut).

🤖 Generated with Claude Code

Dinero v8.0.0-rc37

Dinero v8.0.0-rc37 release candidate.

Source commit: b369a80
Tag: v8.0.0-rc37

This rc37 cut replaces the rc36 Linux tarball set with artifacts rebuilt from the tagged rc37 source and verified to report the rc37 package identity. It includes the rc36 fixes plus corrected release/package metadata so the Linux tarballs and Debian package agree on version/provenance.

Included assets:

• macOS arm64 DMG, Qt zip, and operator tarball, signed/notarized/stapled.
• Linux x86_64 tarballs for full/core/CLI/Qt/miner/seeder/stratum-worker components.
• Debian package: dinero-core_8.0.0~rc37-1_amd64.deb.
• Windows x86_64 user installer (Qt GUI + daemon + miners + SV2 miners), server installer (headless service + AssumeUTXO snapshot), operator zip (headless stack).
• SHA256SUMS files for macOS, Linux, and Windows.

Verification highlights:

• macOS artifacts: Gatekeeper accepted, notarized Developer ID, embedded dinerod/dinero-cli report v8.0.0-rc37 at commit b369a80.
• Linux tarballs: extracted binaries report v8.0.0-rc37 / commit b369a80 where version metadata is supported.
• Debian package: extracted /usr/bin/dinerod reports describe v8.0.0-rc37 and /usr/bin/dinero-cli reports package version 8.0.0-rc37.
• Windows daemon binaries empirically verified to ship OpenSSL 3.5.6 + ngtcp2 (QUIC) and embed 8.0.0-rc37 + commit b369a800. User installer + operator zip bundle dinero-sv2-miner.exe + dinero-sv2-gpu-miner.exe.

Dinero v8.0.0-rc36

⚠️ Superseded by v8.0.0-rc37.

Use rc37 for macOS/Linux release testing. The rc37 Linux tarballs and Debian package were rebuilt from the rc37 tag and verified to report matching rc37 version/provenance. The rc36 Linux tarball set should be treated as stale.

---

Dinero v8.0.0-rc36

Release candidate built from DineroLabs/dinero-v8 commit 6b100da15eaa8306b5a200dff32d5db7736cf981.

Included

• macOS arm64 Qt wallet ZIP
• macOS arm64 notarized + stapled DMG
• macOS arm64 operator tarball
• Linux x86_64 full desktop bundle
• Linux x86_64 standalone tarballs for core, CLI, Qt, seeder, solo miner, GPU miner, miner, and Stratum worker
• Windows x86_64 user installer (Qt GUI + daemon + miners + SV2 miners), server installer (headless service + AssumeUTXO snapshot), operator zip (headless stack)
• macOS, Linux, Windows, and combined SHA256 checksum files

Verification

• macOS app and DMG notarized, stapled, and validated with Gatekeeper tooling
• Linux dinerod verified server-safe: no OpenCL/CUDA runtime dependency
• Linux Qt reports release_tag: 8.0.0-rc36
• Windows daemon binaries empirically verified to ship OpenSSL 3.5.6 + ngtcp2 1.22.1 (QUIC) and subversion=/dinerod:6b100da1/
• Built from the v8 monorepo lane only

Not Included

• Ubuntu .deb is not included because debian/changelog is still stale at 8.0.0~rc7-1; publishing a .deb from that metadata would be mislabeled.

Notable rc36 Fixes Since rc35

• Wallet consolidate RPC and Qt consolidate flow fixes
• ASERT/getblocktemplate solo-mining correction
• Qt embedded daemon live-fleet bootstrap/addnode correction
• Qt dashboard/mainline release lane alignment
• From-genesis IBD scheduler fix merged before this candidate