v3.4.0

Nothing left behind

v3.4.0 · fund safety — soft & additive.

The release with no visible feature and the one you'll be glad is there. Five hardening fixes to the money path, so a hiccup, a race, or a closed tab can never quietly cost you sats. Honest trades are completely unaffected — this is pure safety net.

What's safer (under the hood)

• Your wallet can't be raced. Every operation that touches your ecash now takes an exclusive lock — so two open tabs, or a background cleanup colliding with a payment, can't corrupt the one wallet they share.

• "Done" means the money actually arrived. A payout is never reported as claimed unless your wallet was truly credited — no more "already spent" mistaken for success.

• Stranded sats show up — loudly. If a payout's notes get stuck after a hiccup (a federation switch, a failed redeem), they now surface as a clear alarm with a one-tap export to safety, instead of sitting silently in storage where a data-clear could lose them.

• Your cash is never wiped on a guess. The app refuses to clear a wallet whose balance it couldn't positively confirm is zero — if it can't check, it asks.

• Claiming tries every path. Collecting your sats now tries every valid route before giving up, so one bad envelope can't strand a winner.

Compatibility

No escrow, vote, or wire-format changes — verified, the reducer is byte-for-byte untouched. Existing trades, balances, and listings are unaffected.

Numbers

2,426 tests green; typecheck clean; hardened by a 44-agent adversarial review that found and fixed 2 real issues before release — and honestly documented one low-probability residual in the code rather than hide it.