Skip to content

v1.40.0

Choose a tag to compare

View all tags
@TheTrunk TheTrunk released this 15 Jul 04:10
· 339 commits to master since this release
v1.40.0
fc784cb
This commit was signed with the committer’s verified signature.
TheTrunk Tadeas Kmenta
GPG key ID: A55DFC7EBF10E737
Verified
Learn about vigilant mode.

SSP Wallet — v1.40.0

Deterministic Build · Simulation & Safety edition

Highlights

Transaction simulation & risk warnings for Enterprise Vaults

Enterprise vault signing now shows a full risk strip before you approve anything:

  • Server-side transaction simulation with balance-change preview
  • Severity-ranked warnings (critical / high / medium / info) surfaced directly on the sign screen
  • The device independently cross-checks the server simulation against its own trustless decode — if the server preview contradicts what the bytes actually do, a critical SIMULATION_DECODE_MISMATCH warning is raised and the server preview is downranked
  • Display-only and conservative by design — the device decode always stays authoritative

Trustless Solana vault decode

Solana enterprise-vault transactions are now decoded byte-by-byte on the device using @runonflux/solana-multisig:

  • The relay is treated as untrusted — recipients, amounts, and token mints are verified against the raw transaction bytes
  • Any contradiction between the bytes and the relay-supplied payload hard-blocks signing (active-attack indicator)
  • Independent hard ceiling on paymaster fee reimbursement to bound any fee-routed vault drain
  • Instruction allowlist guard on approvals (leaf-key-drain protection)
  • Backed by an extensive new test suite

Privacy mode

One click blurs all balances and amounts across the wallet — shoulder-surfing and screen-share protection. The preference persists across sessions.

Refreshed look

  • New SSP logos and unified color scheme across light and dark mode
  • Consistent theming powered by a single design-token theme
  • Inter font and new pillar loading animation

Other improvements

  • QR scanning — scan recipient addresses directly with your camera on Send, with a dedicated camera-permission flow
  • Address validation — stronger recipient address checks on Send before a transaction can be constructed
  • Flux node delegates — improved delegate configuration and selection, clearer nodes table and actions
  • SSP Connect — more robust connection handling and request flow
  • Accessibility improvements on Send screens
  • Expanded transaction-construction test suite
  • Updated translations (Crowdin)
  • Dependency updates (@runonflux/solana-multisig 0.11.0, Reown WalletKit, and more)

Full Changelog: v1.39.1...v1.40.0

This release contains deterministic builds for both Chrome and Firefox.

GPG Verification: gpg --verify SHA256SUMS.asc SHA256SUMS

Files Verification: sha256sum -c SHA256SUMS

Reproduction: git checkout v1.40.0 && npm run build:deterministic

Assets 6
Loading