KeepKey Vault v1.4.10

KeepKey Vault v1.4.10

Pre-release — published for testing; on-device verification of the new account-N audit recovery (#299) is still in progress before stable promotion.

What's New

• Recover funds beyond account 0 — the audit wizard now tracks and sweeps UTXO-altcoin funds on non-default accounts (#299), plus an LTC uncommon-path pipeline with in-audit sweep to a standard address (#321)
• Scan the screen for a QR code — third scan option alongside camera and file (#325); WalletConnect pairing now uses the live-camera scanner (#301)
• Cipher recovery over REST + SDK — recovery character entry exposed programmatically, with on-device wrong-word rejection verified (#306)
• Hive (preview) — sponsor-backed account onboarding behind the settings flag, SLIP-0048 derivation, ETH anti-drain gate (#294, #300, #313, #305)
• EVM clear-signing groundwork — Pioneer signed-metadata path landed dark behind a build-time flag (default off, firmware 7.15+) (#326)

Bug Fixes

• Portfolio: LTC (and all multi-xpub UTXO chains) no longer bounce to $0 — balances summed per pubkey (#322); shared leaf parsing + push pipeline repair (#316); asset-page refresh actually refreshes (#314); post-broadcast resync delayed (#318)
• XRP sends over REST/SDK fixed — schema no longer strips tx + lastLedgerSequence (#309)
• EIP-1559 — canonical empty (not 0x0) for zero/absent priority fee, fixing wrong-signer recovery (#308)
• Clear-sign — firmware-handled contracts no longer over-gated into blind-signing (#303)
• TRON — TRC-20 fee_limit raised 30→100 TRX; simulated fee displayed instead of the ceiling (#320)
• LOW GAS warning restored for all chain families + swap pre-flight (#324)
• Onboarding: OOB wizard unstuck after custom firmware flash + signed/unsigned badge (#323); setup wizard reopens on needs_init (#311); Receive works on freshly-added zero-balance chains (#307); non-BTC chains get addresses (#298)
• Windows: update/external-link URL corruption fixed (#319); PowerShell 5.1 build fix (#297)
• Zcash: Sync forces a real device FVK re-verify (#276)

Downloads

Platform	File
macOS (Apple Silicon)	KeepKey-Vault-1.4.10-arm64.dmg
macOS (Intel)	KeepKey-Vault-1.4.10-x86_64.dmg
Windows	KeepKey-Vault-1.4.10-win-x64-setup.exe (added separately by the Windows build box)
Linux	KeepKey-Vault-x86_64.AppImage

SHA-256 checksums for all assets are published as SHA256SUMS.txt on this release.

Verification (macOS)

The macOS DMGs are signed with Developer ID "KEY HODLERS LLC (DR57X8Z394)" and notarized + stapled by Apple. Verify:

spctl -a -vvv -t install KeepKey-Vault-1.4.10-arm64.dmg

What's Changed

• fix(hive): correct derivation path to SLIP-0048 (Phase 0) + onboarding plan by @BitHighlander in #294
• feat(hive): sponsor-backed account onboarding + ETH anti-drain gate by @BitHighlander in #300
• feat(recovery): expose cipher-recovery character entry over REST + SDK (+ #272 wrong-word test) by @BitHighlander in #306
• fix(dashboard): let new users Receive on a freshly-added zero-balance chain by @BitHighlander in #307
• feat(hive): list Hive Support as a v7.15.0 upgrade-preview feature by @BitHighlander in #305
• docs: firmware-release SOP — upstream-first dependency gating by @BitHighlander in #304
• fix(windows-build): replace em-dashes with ASCII so PowerShell 5.1 can parse by @BitHighlander in #297
• docs(zcash): real-device shielded smoke checklist — v1.4.6 stable-promotion gate by @BitHighlander in #282
• test(zcash): witness recomputes root for note in lower completed shard by @BitHighlander in #275
• fix(clear-sign): stop over-gating firmware-handled contracts into blind-signing by @BitHighlander in #303
• fix(multichain): get addresses for non-BTC chains, not just Bitcoin by @BitHighlander in #298
• fix(wc): use live-camera QR scanner for WalletConnect pairing by @BitHighlander in #301
• fix(zcash): Sync button forces a real device FVK re-verify by @BitHighlander in #276
• feat(audit): track & recover UTXO-altcoin funds beyond account 0 by @BitHighlander in #299
• fix(eth): send empty (not 0x0) for a zero/absent EIP-1559 priority fee by @BitHighlander in #308
• fix(hive): stop unsupported Hive derivation from kicking the dashboard to wallet-select by @BitHighlander in #310
• fix(onboarding): reopen setup wizard on needs_init + refactor(dashboard): always-show default chains, EVM-only Add chain by @BitHighlander in #311
• fix(hive): gate ETH anti-drain gate off until Pioneer implements it by @BitHighlander in #312
• feat(hive): enable ETH anti-drain gate for release by @BitHighlander in #313
• fix(refresh): asset-page refresh actually refreshes (hive derive, silent failures, stale shadows) by @BitHighlander in #314
• refactor(balances): share leaf parsing between bulk + single-chain paths; repair the push pipeline by @BitHighlander in #316
• fix(hive): thread hiveBuildResult through hiveSignTx RPC response by @BitHighlander in #317
• fix(send): delay post-broadcast balance resync by @BitHighlander in #318
• fix(windows): stop corrupting the update/external-link URL via cmd start by @BitHighlander in #319
• fix(tron): raise TRC-20 fee_limit 30→100 TRX; display simulated fee by @BitHighlander in #320
• fix(xrp): REST /xrp/sign-transaction schema strips tx + lastLedgerSequence by @BitHighlander in #309
• feat(audit): LTC uncommon-path pipeline + in-audit sweep to standard address by @BitHighlander in #321
• fix(portfolio): sum multi-xpub UTXO chains per pubkey — stop LTC bouncing to 0 by @BitHighlander in #322
• fix(oob): unstick wizard after custom firmware flash + signed/unsigned badge by @BitHighlander in #323
• fix(ui): restore LOW GAS warning for all chain families + swap pre-flight by @BitHighlander in #324
• feat(qr): third scan option — scan the screen for a QR code by @BitHighlander in #325
• feat(clearsign): EVM insight behind EVM_INSIGHT flag (default off, fw 7.15+) by @BitHighlander in #326

Full Changelog: v1.4.9...v1.4.10