v2.6.3

🔒 Security Hardening

• Critical fix: Wallet unlock now correctly verifies passwords for PassKey (PRF) wallets - previously, any password could bypass the lock screen due to a Vue event handler passing the click event as a truthy authentication flag
• Defense-in-depth: background now independently verifies lock passwords for PRF wallets against the stored hash, instead of trusting the browser-side signal alone
• PassKey auto-trigger no longer fires when you have an explicit lock method (password, PIN, or pattern) set - it was silently unlocking the wallet via biometrics before you could even type your password. You can still use PassKey manually via the button

📇 Contact Management & ADA Handle

• ADA Handle support for contacts - handles are resolved automatically and stored alongside addresses
• Handle mismatch detection warns you if a contact's ADA Handle no longer resolves to the same address
• Improved contact editing with address conflict warnings
• Better handle preservation when editing contacts

💱 DexHunter Integration

• "Powered by DexHunter" branding added with proper translations

📸 Camera Permissions (Keystone QR Scanner)

• Redesigned camera permission denied state - clean layout with clear instructions instead of a broken error screen
• Functional "Open Settings" button that opens your browser's camera permission settings (supports Chrome, Brave, and Edge)
• Added retry capability after granting permissions

📨 Send Dialog Improvements

• Empty wallet state now shows a friendly message with a quick "Receive" action instead of a confusing disabled form
• Refactored transaction signing into a reusable TransactionAuthSection component
• Improved type safety across the transaction flow

🔐 PRF Wallet Lock Improvements

• PRF wallets now use a dedicated lock password (separate from PassKey encryption) for the auto-lock screen
• Lock password is verified entirely in the browser context for consistent behavior
• Clearer labeling distinguishes "Lock Password" from "Spending Password" in the UI

🛡 Network Route Guards

• All network-restricted pages (cashback, governance, staking, swap, transactions, Gero Card) are now guarded at the router level - no more accessing unsupported features via direct URL on testnet/preview networks

🔗 Legal & Links

• Fixed broken Terms of Service and Privacy Policy links throughout the app
• Privacy Policy now opens the website directly instead of showing an outdated in-app dialog (removed 800-line PrivacyPolicyDialog.vue)
• Unified duplicate i18n keys for legal links

🖼 Cashback Retailer Display

• Retailer images now show fallback initials when the logo fails to load, instead of a broken image icon

🔧 Fixes & Improvements

• Transaction search no longer misses results when typing fast
• Staking section renamed from "Staking Rewards" to "Staking" for clarity
• Improved type safety across transaction details, handling, and signing components
• Updated i18n translations (English and German) for all new features