Skip to content

Wren 0.1.2 — Security and reliability update

Choose a tag to compare

@github-actions github-actions released this 19 Aug 14:14

Wren 0.1.2

Wren 0.1.2 is a security, reliability, and wallet-safety update.

Highlights

  • Fails closed if Chromium sandboxing is unavailable or disabled.
  • Tracks canonical transaction receipts and handles chain reorganisations,
    replacements, speed-up transactions, and cancel transactions more safely.
  • Recovers review requests when a transaction or EIP-5792 batch does not have
    enough funding.
  • Adds ERC-7811 asset discovery and a read-only inspector for transactions,
    calldata, EIP-712 data, and supported JSON-RPC requests.
  • Adds optional local dapp guardrails, stronger recipient review, safer native
    Max, and reviewed token/native Sweep calls.
  • Adds optional confirmed-recipient history and stronger OS or hardware signer
    protection.
  • Minimises browser transport identity retained during Companion authentication.

Downloads

This release publishes unsigned Linux x64 packages only:

  • Wren-0.1.2.AppImage
  • wren_0.1.2_amd64.deb
  • SHA256SUMS
  • wren.cdx.json

Verify SHA256SUMS and the GitHub build attestations before installation.

Companion compatibility

Install Wren 0.1.2 before Wren Companion 0.1.1. The pair uses mutually
authenticated protocol 3. Older Wren builds reject the Companion 0.1.1
authentication message.

Release boundary

Wren has not received an independent security audit. Use a backed-up disposable
profile and test accounts before you trust it with valuable assets. Linux
packages are unsigned. macOS, Windows, Linux arm64, native Wayland Glide, and
unlisted hardware combinations are not release-qualified. Simulation, decoded
labels, and guardrails are review evidence. They do not guarantee transaction
safety.

See the repository README, signer and platform support reference, and
qualification checklist for supported behavior and known limitations.