Aura Wallet v27.27.60

Aura Wallet v27.27.60

This source release presents Aura Wallet as a clearer, more maintainable open-source
project and strengthens reproducible dependency management.

Project information

• Rebuilt the repository overview around Aura's identity, official links,
  capabilities, security and privacy boundaries, project layout, and verification.
• Added an Aura FAQ and architecture reference with precise wallet, storage,
  networking, and signing data flows.
• Added support guidance and a focused feature-request form.
• Expanded contributor guidance for sensitive wallet changes and clean reviews.
• Added complete package metadata and updated the GitHub description, App Store
  link, and repository topics.

Security page

• Added a concise Security Policy that contains only private reporting guidance and
  secret-handling rules.
• Enabled GitHub Private Vulnerability Reporting for the repository.
• Added an automated guard that prevents retired wording about independent or
  third-party audit status from being introduced into project information.

Reproducibility

• Pinned every production dependency declaration to the version already resolved in
  package-lock.json.
• Updated JavaScript, Android, and iOS versions to 27.27.60.

Verification

• CI verification and dependency advisory audit: passed
• Android application build: passed
• CodeQL JavaScript and TypeScript analysis: passed
• Dependency audit: 0 known vulnerabilities at release time
• Bitcoin vectors: 17/17 passed
• Crypto and signing self-test: 24/24 passed

This is a source-code release. Production APK and IPA packages require the authorized
store-signing process and are not attached here.

Aura Wallet v27.27.40

Aura Wallet v27.27.40

This source release improves repository maintainability and strengthens several
security boundaries.

Highlights

• Centralized the official project URL as aurabitcoinwallet/aura-wallet for the
  About and open-source/welcome experience.
• Require HTTPS for custom block explorers, reject credential-bearing URLs, and
  validate transaction IDs before opening an external link.
• Remove unused iOS permission metadata and the local-network ATS exception.
• Replace a deprecated text-encoding dependency and add a test for runtimes where
  native text encoding APIs are unavailable.
• Add strict linting, type checks, security invariants, Bitcoin test vectors,
  cryptographic self-tests, CodeQL, dependency auditing, and an Android build gate.
• Pin third-party GitHub Actions to full commit SHAs.
• Add contribution, release, conduct, issue, and pull-request guidance.
• Remove SECURITY.md while retaining GitHub private vulnerability reporting.

Verification

• CI verification: passed
• Android debug build: passed
• CodeQL JavaScript/TypeScript analysis: passed
• Dependency audit: 0 known vulnerabilities at release time
• Bitcoin vectors: 17/17 passed
• Crypto/signing self-test: 24/24 passed

This is a source-code release. No production APK or IPA is attached. Production
mobile binaries must be built and signed with the authorized release credentials.
No software wallet can be guaranteed absolutely secure; users should verify builds
and protect recovery phrases and private keys offline.

Aura Wallet v27.27.20

Aura Wallet v27.27.20

This release corrects the GitHub repository link shown in About and the Welcome/Open Source flow:

https://github.com/aurabitcoinwallet/aura-wallet

Security hardening

• Android production builds can no longer use the checked-in debug signing key.
• Release builds now fail closed unless all production signing credentials are supplied.
• Android production traffic remains TLS-only, backups remain disabled, and iOS ATS remains enforced.
• Build dependencies with known advisories were updated without applying unsafe forced downgrades.
• Automated release security invariants were added.

Validation

• ESLint: 0 errors
• TypeScript: passed
• Jest: passed
• Release security checks: 21/21 passed
• Bitcoin test vectors: 17/17 passed
• Wallet cryptography and signing self-test: 24/24 passed
• iOS plist and project validation: passed

Always verify the release source and signatures before installing software that controls funds.

Aura Wallet v27.27.0

• Privacy and storage reliability improvements

Aura Wallet v26.26.60

• Further reliability and correctness improvements across the app

Aura Wallet v26.26.40

• Broad reliability and correctness improvements across sending, networking, and storage

Aura Wallet v26.26.30

• Screenshot/recording protection for sensitive screens
• TLS-only networking in release builds
• Hardened wallet export

Aura Wallet v26.26.0

• Hardening around wallet import and encrypted storage

Aura Wallet v12.60.2

• Improvements to sending and connection handling

Aura Wallet v12.40.2

• FIX: scanning a bitcoin: payment QR now fills the address (and amount) correctly instead of pasting the whole link