Skip to content

Releases: intnsity/notyas

Release list

notyas 0.2.3

notyas 0.2.3 Latest
Latest

Choose a tag to compare

View all tags
@intnsity intnsity released this 23 Aug 18:38
v0.2.3
This tag was signed with the committer’s verified signature.
intnsity intnsity
GPG key ID: 3AC4BBCFE51AB37D
Verified
Learn about vigilant mode.
661e8dc

notyas 0.2.3

First release with downloadable build artifacts. Earlier tags had gated firmware but no packaged images — the release container had never built until now.

This is preview firmware. No security audit, no Secure Boot, no flash encryption, no secure element. The on-device signing flow has not been driven from the touch panel. Use testnet and a seed you can throw away. Full statement: docs/SECURITY.md.

Downloads

Download the zip for your board, or the individual files. The zips contain the same files listed in SHA256SUMS.txt — extract and verify the individual files against the signed hash list.

File What it is
notyas-0.2.3-waveshare-4b.zip Waveshare 4B: merged image, bootloader, partition table, app, sdkconfig, BUILDINFO, VERIFY.json, ELF
notyas-0.2.3-elecrow-5.zip Elecrow 5: same set for the Elecrow board
notyas-0.2.3-src.tar.gz Source tarball
notyas-0.2.3-components.tar.gz Pinned component sources
SHA256SUMS.txt Hashes for every file
SHA256SUMS.txt.asc Signature over the hashes (key A1E9 53B2 5C6A 623B 77A1 D522 3AC4 BBCF E51A B37D)

Flash it

esptool --chip esp32p4 -p COM3 -b 921600 write-flash 0x0 notyas-0.2.3-waveshare-4b-merged.bin

Substitute your port and board. Full walkthrough including the Windows flash tool and signature verification: docs/FLASHING.md.

After flashing, press Verify device (third button on the home screen). Compare the numbers against the VERIFY.json from your board's zip.

What's new

Firmware delta from 0.2.2 is the version string only. The real change is that the release container now builds.

Two things that will bite you

  1. Give your wallet software the descriptor, not the bare xpub. The Export screen shows the descriptor first. Use that one. A bare xpub carries no fingerprint or derivation path, so wallet software guesses — and BlueWallet defaults to legacy, which may not be what you want.

  2. Multi-input spends may be refused (R-02). If a transaction spends two or more coins, each coin's amount must be proven by a full previous transaction. BlueWallet doesn't attach those, so single-coin spends work but consolidations or Send Max are refused. Use coin control or rebuild in Sparrow, Electrum, or Bitcoin Core.

Full refusal table: docs/REFUSALS.md.

Limitations

  • No backup. Write down the recovery words — that is the only copy.
  • 15 wrong PINs erase everything.
  • No PIN change, policy change, or PIN removal from the panel.
  • Session auto-locks after 120 seconds, no warning.
  • No finalization. Your wallet software finalizes and broadcasts.

Full list: docs/KNOWN-ISSUES.md.

Assets 8
Loading