v2.4.0

v2.4.0 — Your keys, your exit

Compatibility: SOFT — no wire-format change, nothing touches the trade protocol.
Two new self-custody surfaces in Me. Works across every prior version in any mix.

Chama is not a wallet — it's total control
This release makes that literal. Two escape hatches that put you, and only you,
in charge of the funds that pass through your account.

Your recovery phrase (Me › Advanced)

• Chama's ecash is owned by a 12-word BIP-39 recovery phrase — a real, random
  seed (not derived from your Nostr key), stored encrypted on Nostr so it
  follows you across devices. Now you can also hold it offline.
• A new "Recovery phrase" card reveals the 12 words behind a deliberate tap and
  a plain warning: anyone with these words can take your funds; never type them
  into a website; Chama will never ask for them. Reveal, copy, or show a QR —
  your choice. Visible to everyone, not gated behind power-user mode, because
  backing up your own money is a right, not an advanced feature.
• With these words you can restore your funds on any Fedimint wallet, even if
  you lose this device or your Nostr account.

Withdraw as ecash — no Lightning fees (the dust exit)

• A new "Withdraw as ecash" button in your Sats Recovery card turns your balance
  into a Fedimint ecash note you import into Fedi — or any Fedimint wallet on
  your federation — with zero routing fees. It's available even for dust the
  Lightning "Recover" button can't economically move, so small leftovers finally
  have a way out.
• Honest about compatibility: the note is Fedimint ecash, bound to your
  federation (the note even carries the federation's address). It imports into
  Fedi and other Fedimint wallets on that federation — NOT into Cashu wallets,
  which are a different protocol. The screen says exactly which federation, and
  never claims Cashu.
• Money-safe by design: the instant the note is generated your balance leaves
  your Chama and lives only in that string, so Chama stashes it immediately
  (crash-safe, scoped to your account) and shows a "Pending ecash export" card
  until you confirm you've imported it — so a closed tab or a crash can never
  orphan it. Clearing that copy is a two-tap confirm.
• Inside Fedi there's nothing to export — claims already land straight in your
  Fedi wallet with no Lightning fees. So this is the non-Fedi rail; Fedi was
  already covered.

Numbers

• 2,216 tests green, including the crash-safe ecash-export stash (roundtrip,
  per-account scoping, clear-on-confirm).

Coming next

• Animated/dynamic QR for large ecash notes (so any amount can transfer by scan,
  not just copy) — pending confirmation of the exact format Fedi scans.