v2.7.0

Gero Wallet v2.7.0

Gero 2.7 is our biggest release ever: the wallet is now open sourced, the entire interface has been rebuilt on a new design language, and the release ships new chains (Midnight on mainnet, Bitcoin on testnet), a new custody option (Sign in with Google), the Gero Companion assistant, in-wallet perpetuals, our own swap aggregator, cross-device signing, and a deep security-hardening pass backed by two external audit rounds.

Gero Is Now Open Source

• The full wallet source code is public on GitHub
• Added SECURITY.md with a responsible vulnerability disclosure policy (including an email fallback), a NOTICE file, a Code of Conduct, and issue/PR templates for contributors
• README overhauled to accurately reflect the live feature set
• CI workflows hardened for a public repo (fork-PR guards, SHA-pinned actions)

New Design Language

• Complete visual rebuild on a single design-token layer: four "liquid-glass" surface materials, self-hosted fonts, a unified type ramp, and one chain-accent color that re-themes the whole app per chain
• All dashboard tables and widgets moved to the new liquid-glass material, tuned for readability (WCAG-checked contrast across 56 automated checks)
• Redesigned onboarding: the Create / Restore / Pair flows now live inline in a single welcome card with a two-step selector (choose a blockchain, then a network) and per-network theming (Cardano cyan, Apex teal/red, Bitcoin orange, Midnight violet)
• New state-aware welcome screen with animated isometric scenes: a first-run landing for brand-new users, and a storefront variant alongside the sign-in list when wallets already exist. Motion respects your reduced-motion setting
• New empty-wallet experience: instead of dropping you into a blank wallet, a fresh wallet now opens with a clear sense of where to start, including a guided first-deposit path, a market-first view for fresh mainnet wallets, perk teasers, and subtle micro-animations
• Tighter, consolidated seed-phrase backup dialog and a redesigned staking page with a compact delegation card and rewards graph

Sign in with Google (MPC Wallets)

• Create a recoverable Cardano wallet with just your Google account, with no seed phrase to manage day-to-day
• Self-hosted MPC custody: your key is split into 3 Shamir shares (device, login, recovery) with a 2-of-3 threshold. The backend holds only one share, so it can never sign for you or lock you out
• Recovery via an encrypted backup and a fileless password-based flow; the 24-word mnemonic stays exportable as the ultimate escape hatch
• Full signing support: sending, dApp signing via the side panel, and crash-safe recovery-password changes
• Rolling out progressively during the 2.7 cycle

Midnight Integration

• Midnight joins the wallet, on mainnet as well as the test networks, with its own dark-violet theme, chain badges, and cross-chain dashboard parity
• DUST generation entirely inside the wallet, no more bouncing to an external portal: generate DUST from native NIGHT on Midnight and from cNIGHT held on your Cardano wallets, with on-chain registration, deregistration, and destination-migration flows
• Gero-sponsored collateral lets wallets without a pure-ADA UTxO complete DUST registration
• Automatic detection and guided consolidation of duplicate DUST registrations, plus a truthful DUST "battery" covering both native and cNIGHT-backed generation
• Choose where your zero-knowledge proofs run: Gero Cloud, a local proof server on your own machine, or Arkhia zkPaaS with your own key, switchable from the dashboard and side panel
• Cross-Device Proving (XDP): your own desktop can privately generate the proofs for your phone's Midnight sends over an end-to-end-encrypted channel. Gero's infrastructure only ever sees ciphertext

Gero Companion

• Your in-wallet assistant, available in the side panel and dashboard. Ask about your portfolio, staking, or any token and get answers grounded in your actual wallet data, with inline charts when a token comes up
• Agentic mode: the Companion doesn't just answer, it acts. Ask it in plain language to chart a token, start a swap, or set up staking and it routes you straight into the flow
• Proactive feed: a heads-up when your tokens or watchlist move, with tunable tone and categories. Observations only, never financial advice
• In-wallet chat support: talk to the Gero team directly from the Companion dock, fully non-custodial, with a spending-auth handshake proving wallet ownership. No keys ever leave the wallet
• Send and receive file attachments in support chat, with inline image previews, so a screenshot can go straight into the conversation
• Rolling out gradually behind feature flags

Cross-Device Signing

• The desktop wallet is ready to pair with our upcoming Gero iOS app: QR scan-to-pair with wallet-control proof, short-authentication-string confirmation, and a "wallet-verified" pair badge
• Once paired, "Sign on another device" from the Send flow, with trusted-device management, per-device signing policy, replay/expiry protection, and wake-up support for offline signers

Perpetuals (Strike Finance v2)

• In-wallet perpetuals trading at full parity with the Strike dApp: deposit, withdraw (settled in USDM), and account connection, with no CIP-30 hop required
• Live order previews: entry price (VWAP), required margin, fees, liquidation price, and slippage
• Position tables with live mark-price PnL, cross-margin context, and distance-to-liquidation
• TWAP orders, order batching over a live WebSocket, and a redesigned amount field

Swap

• Swap now runs on Gero's own aggregator via the embedded gero-swap widget, replacing DexHunter across all five swap surfaces (page, dialog, dashboard, side panel, token detail)
• Works with every wallet type: password, PassKey, Ledger, Trezor, and Keystone

Bitcoin (Testnet)

• Bitcoin ecosystem support with a Mempool widget, routed through Gero Sync real-time push
• Testnet-only for now, available via the onboarding network selector, with mainnet to follow

Mini Gero (Side Panel)

• Choose what the extension icon opens: full dashboard or Mini Gero side panel (Settings > Advanced)
• Swap gets the center nav slot; a settings entry now deep-links into dashboard settings, and Mini Gero can focus an already-open dashboard tab instead of spawning a new one
• Chain-aware side panel for Apex networks and the market-first empty state mirrored from the dashboard
• Fixed wallet switcher taps doing nothing, unresponsive token filter chips, and a contradictory "No tokens yet" row

Portfolio & Market

• Market and portfolio data now flow through Nexus with device auth and graceful degradation. A slow or failing price feed no longer breaks the portfolio view
• New privacy toggle (eye icon) masks every monetary value across dashboard and side panel, persisted per wallet
• Recent Transactions card in the dashboard hero row, ADA chart tooltips, and the hero chart refreshes when a new transaction lands
• ADA-only portfolio and chart on Preprod/Preview networks; accurate portfolio totals; cached account hydration on login kills the empty-balance flash
• Fixed token balances on a freshly restored wallet being priced without their decimals, plus currency rounding and a guard against Infinity/NaN in 24h change figures

Staking & Stake Pool Operators

• Delegation now shows a pending state while the transaction is unconfirmed, so there's no more wondering whether it went through
• Your first delegation shows the ~2 ADA account deposit again, across both certificate generations
• Clearer blockers before you unstake with pending rewards, and reward withdrawal correctly requires DRep delegation on every path, including the Companion
• New Stake Pool Operator dashboard: a guided pool-setup wizard for Ledger and software keys (cold key + VRF), pool-update flows with side-panel Bluetooth signing, and safety guards against fund loss on retries
• Reward withdrawals and unstaking are now built server-side via Nexus

dApp Connectivity

• WalletConnect v2 activated end-to-end (Minswap cip34 spec), verified against live dApps
• Opera support: the wallet now detects browsers without the Side Panel API and opens Mini Gero in a popup window instead, so dApp approval and signing work. dApps also get real error messages instead of an opaque empty object
• Trezor now signs without the Bridge daemon via WebUSB, including transaction and data signing through a device-verified popup window
• dApp connections got a reliability pass: duplicate enable() calls are coalesced, side-panel routing is consistent for enable and signTx, and a slow Cardano-Shield check can no longer stall a connection
• Sponsored collateral via Nexus: trusted dApps keep working even when your wallet has no dedicated collateral UTxO. Gero lends one from a shared pool, routed to the wallet's network and hardened with input caps and network guards

Governance & DAO

• Support for the CIP-0149 donation mechanism and a revamped DAO tab (Clarity API + UI)
• Fixed the governance panel's "Confirm Delegation" button not actually delegating
• Pending DRep vote-delegation is now detected across all in-flight transactions, not just the most recent one
• DAO rich text is now sanitized with DOMPurify

Security Hardening

Two external audit rounds plus an internal pre-open-source review landed in this release:

• Critical: mnemonic, 2FA, and MPC encryption upgraded from a weak key-derivation scheme to Argon2id (backward compatible; existing wallets migrate transparently)
• The legacy crypto-ts library was removed entirely, including its weak KDF wrap around root-key, Bitcoin, and Midnight key encryption, with regression tests guarding the legacy decrypt path
• dApp signTx now trusts only the relay-set request origin, so a malicious page can no longer spoof its origin
• CIP-30 reads validate frame sources against a server-side whitelist
• WalletConnect pairing now requires a real user gesture, so a page cannot silently initiate one
• Trezor signData hardening, OAuth flows moved to a CSPRNG, and sensitive cross-device RPCs restricted to the extension's own pages
• Changing your spending password now invalidates the old one immediately in-session, without forcing a re-login
• API keys no longer baked into the client bundle; dependency overrides, an npm-audit pass, and a purge of dead build toolchains cleared all production-critical CVEs

Fixes & Improvements

• Sends, delegations, and governance votes are now built server-side via Nexus for correct Conway-era fees and change handling
• Send flow: BigInt-safe amounts, a live MAX for non-ADA tokens, NFTs correctly excluded from token sends, and "Send entire wallet" no longer double-allocates assets across multiple recipients
• Send dialog keeps Continue disabled until the form is valid, and Quick Send token rows honor the Hide Balances toggle
• Apex Fusion: Vector wallets sync correctly with the right explorer links, fiat valuation no longer shows $0, and the swap route is properly chain-gated
• Upgraded to @cardano-sdk 0.47
• Hardware wallets: clearer device signing prompts, no more empty auth section, and correct stake-key registration
• Friendly fallback when creating a PassKey wallet in browsers without PRF support (e.g. Brave), with an honest pending state while capability is being checked
• Cashback moved to the Bring-hosted portal for retailer discovery, rewards, and claims, with a fix for Chrome painting a white backdrop behind it
• Transaction details: scrollable panel, contract transactions render even without a cached body, Minswap V2 pool transactions get the Minswap chip, and expanding Witness/Metadata no longer jumps the layout
• CIP-25 v2 support for token resolving, with refactored asset-metadata decoding and better on-chain metadata handling
• Improved KYC status handling and localization in wallet components
• Feature-flag streaming reconnects back off exponentially and pause while offline
• Store broadcasts over 32 MiB are chunked so huge wallets no longer hit Chrome's messaging cap
• Responsive dialog widths across the app and a wider, height-capped changelog dialog
• Removed legacy dead code: old multisig module, zkFiat, zkSmart Google-wallet subtree, and orphaned dialogs
• Updated English and German translations for all new features