Skip to content

KeepKey Vault v1.5.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Aug 19:21
v1.5.1
8a0e4d3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New

  • ClearSign Studio — author, inspect and sign Solana clear-sign instruction schemas from inside Vault, plus a Solana outflow check that flags transactions moving funds out of your accounts (#402)
  • Hardware-verifiable x402 payments — an x402 payment intent is never trusted as sent. The signing path re-derives network, sponsor, mint, amount, authority and destination token account from the actual transaction and matches them against the exact v0 message before the device is asked to sign (#403)
  • Reusable clear-sign schemas for Relay swaps — a schema signed once per program+instruction lets the device decode and display a swap instead of blind-signing it (#380)
  • Zcash NU6.3 (Ironwood) transactions (#381)
  • Taproot and entropy host acceptance for firmware 7.15 (#386)
  • Swap reconciliation — post-swap on-chain reconcile for EVM token outputs, a reconciliation ceiling, and sub-denom pricing (#377, #378)

Bug Fixes

  • EVM account paths — accounts beyond the first derived through an outdated path, so verify-on-device showed a different address than the UI and sends signed with the wrong key. All call sites now derive through evmAddressPath(), and Pioneer broadcasts verify the signer before sending (#387)
  • Staking panel crashed the asset page on any non-empty positions response (#388)
  • Non-string error payloads crashed the renderer (#389)
  • Device failures surface instead of hanging the UI (#396)
  • Create flow: a PIN mismatch is explained rather than ejecting you, and the wizard recovers when a replug severs the resetDevice RPC (#393, #394)
  • Removed a false 7.15.0 firmware gate on versioned Solana swaps (#395)
  • Honest copy when no swap route exists for an asset (#398)
  • Overlong UTXO swap memos are rejected before signing (#379)
  • Hive: accept the ISO form of limit_order_create expiration (#375)
  • Browser-extension bridge: a live extension keeps its slot instead of being evicted (#372)
  • REST hardening for old-firmware behavior (#390)
  • Signing dialog, unpriced balances, and Hive button contrast polish (#382)

Note on clear-signing

Clear-sign verification currently requires the AdvancedMode policy to be
enabled on the device. Firmware verifies clear-sign metadata only against a
signer loaded at runtime, and trusting a host-supplied signer is gated behind
AdvancedMode by design. Built-in signing keys, which will remove this
requirement, are not yet shipped. Without AdvancedMode the device falls back to
its normal confirmation screens — it never displays unverified decoded detail.

Downloads

Platform File SHA-256
macOS (Apple Silicon) KeepKey-Vault-1.5.1-arm64.dmg 17fff71d5eff52685b6f1b3a07a0d4a0bb0cbeefc756e40bf45c621a310547e7
macOS (Intel) KeepKey-Vault-1.5.1-x86_64.dmg 0dd217ab7785743e6e78b697d67c53d570608a9dfd56d8b56462844a23a61c86
Linux (AppImage) KeepKey-Vault-x86_64.AppImage 3c7ddb287afe9b50280156a92261e2ae029f039f9d6713121c516fd46a2e2869
Linux (deb) keepkey-vault_1.5.1_amd64.deb a9428c6f0fd9e0fcf4dc5b0e1a4ab4d641d2d69dde4646c47b9ac596ebaa8d6b

To verify: shasum -a 256 <filename>

Windows is published separately from the Windows build machine.

Assets 14
Loading