Skip to content

v1.7.3

Choose a tag to compare

View all tags
@RaheemJnr RaheemJnr released this 09 Jun 19:42
· 99 commits to main since this release
v1.7.3
1b1c666
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v1.7.3:
Six security findings from the Nervos team's review are closed in this release.

The send screen now refuses to broadcast a transaction that would leave less than 61 CKB of change. Previously that residue was silently absorbed as fee.

Backing up a raw-key wallet now requires PIN verification before the key is shown. The key is fully masked until you tap to reveal, and the clipboard is cleared 60 seconds after a copy.

Toggling "Authenticate before sending" off now requires re-entering your PIN.

The in-app updater verifies the signing certificate on the downloaded APK before launching the system installer.

The release workflow now checks out the verified commit instead of the unqualified tag name.

Wallets created on devices without a screen lock now work in a software-only encryption mode and upgrade to hardware-backed protection automatically the moment you enable a device lock.

Source: github.com/RaheemJnr/pocket-node/releases

Assets 3
Loading