·
532 commits
to develop
since this release
d6d699b
This commit was signed with the committer’s verified signature.
Fixed
- Standard swap flow could skip calldata validation when blind signing was enabled
- Legacy transactions vulnerable to cross-chain replay are now rejected
- EIP-7702 authorizations without a chain ID were accepted for all chains
- EIP-7702 authorization review could be tricked into signing with a different key than displayed
- Staking plugin review could hide a meaningful native value transfer
- ETH2 deposit screen now shows the full validator public key, and malformed deposits are rejected
- Privacy export now requires explicit user confirmation with clearer wording
- "Display hash" setting was ignored for EIP-191 personal messages
- Clear-signing display could show incorrect values or ignore field constraints
- Plugin state could leak between consecutive transactions
- EIP-712 messages with recursive structures could crash the device
- ERC-20 approve() shown as a standard transfer during swap flows
- ERC-1155 batch transfers now show individual token IDs and quantities
- Signed integer values with unusual sizes (e.g. int160) were rejected in EIP-712 messages
- Memory leak when aborting a transaction signing flow
- Various parsing and memory-safety issues found by security review and fuzzing