Skip to content

Ibis Wallet v4.6-beta

Choose a tag to compare

View all tags
@aeonBTC aeonBTC released this 22 Jul 22:17
v4.6-beta
bf1fb66
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security Audit: GPT 5.6 + Grok 4.5 + Kimi K3

Bug Fixes

  • PIN lockout now enforced by both wall-clock and monotonic clocks — no longer bypassable by changing device time or rebooting (monotonic arm correctly dropped post-reboot so the real PIN never bricks).
  • Failed-attempt counter and lockout state persist with synchronous commits — a process kill can't regress auto-wipe progress.
  • Duress PIN is verified before the lockout check and always succeeds, so it can never trigger auto-wipe; counter shared between real and duress PINs.
  • Wallet create/import/load now sets ownership tracking (loadedWalletId + mutex) on every path — fixes empty Manage Wallets and concurrent-load races.
  • Stale Electrum syncs from a previous wallet/connection can no longer clobber state for the newly loaded wallet (ownership guards across subscription, quick-sync, and incremental paths).
  • Electrum responses are size-capped — a malicious server can no longer OOM the app via unbounded protocol lines.
  • Frozen UTXOs are excluded from CPFP/RBF fee-bump coin selection — the do-not-spend flag can't be bypassed through fee-bump paths.
  • CPFP package fee picker now prices the whole package (parent + child), not just the child vsize.

-======-
SHA256: B189D43D4ECB82EF2ADEC179964BFB6C91F0AF297D70CBE61DE4EB6355FF088F
MD5: AA753DCA99F6CE8666EC1E39307E02B7
PGP Public Key
-======-

Full Changelog: v4.5-beta...v4.6-beta

Assets 4
Loading