KeepKey Vault v1.5.4

What's new

• Certified ClearSign coverage for real Solana Relay LUT routes and Portals EVM swaps, reducing blind-signing paths.
• Provider-key derivation through the BIP-85 ceremony.
• Robinhood Chain (eip155:4663) support.
• Certified KeepKey emulator runtime 7.16.0 bundled directly in the macOS apps; no separate emulator install is required.

Reliability fixes

• Failed balance lookups are no longer presented as zero balances across dashboard, send, builder, and swap flows.
• The dashboard keeps every chain visible and shows per-chain pending state.
• Mobile pairing exports all known accounts.
• Solana swap balance confirmation and schema fallback behavior are corrected.
• AdvancedMode routing is explicit and opt-in.
• Zcash privacy is gated on the packaged sidecar being available.

Downloads

Platform	Download	SHA-256
macOS Apple Silicon	KeepKey-Vault-1.5.4-arm64.dmg	6168da7dd33df75c3590d1e37cd6d67bab55ebca5c237f797424a2ffca60e9f7
macOS Intel	KeepKey-Vault-1.5.4-x86_64.dmg	3c423d13aa8fabdc89accfe971ac602c6e8f30c855a0cfd827ab3e36959fd8d0
Linux AppImage	KeepKey-Vault-x86_64.AppImage	f98eaca0a6a175692c7647ff01bd9476a1479e977aa52f31b7917593df0742c9
Linux Debian	keepkey-vault_1.5.4_amd64.deb	21378627c65b4eea25cc7f1a0567021aaf64a7bd0b54097daa8b7cdeba6c024e

Windows packaging and signing are handled separately on the dedicated Windows release machine.

Verification

Download SHA256SUMS.txt, then run:

shasum -a 256 -c SHA256SUMS.txt

Both macOS DMGs are signed by Developer ID Application: KEY HODLERS LLC (DR57X8Z394), notarized by Apple, and stapled. The embedded universal emulator library was runtime-smoke-tested and reported 7.16.0.

Changes

• #409 Export every known account in mobile pairing payloads.
• #410, #411, #414, #415 Correct failed-balance and dashboard state handling.
• #416 Repair Windows hdwallet and Zcash sidecar builds.
• #417, #418, #419, #420 Tighten swap, AdvancedMode, and Solana schema behavior.
• #421 Add the BIP-85 provider-key ceremony.
• #423 Add Robinhood Chain.
• #424 Condense the authenticity review.
• #426 Authenticate Solana Relay LUT routes.
• #427 Authenticate Portals EVM swaps.

Full changelog: v1.5.3...v1.5.4

What's Changed

• Release v1.5.3 → master by @BitHighlander in #412
• Back-merge master into develop after v1.5.3 by @BitHighlander in #413
• fix(evm): a failed balance fetch is not a zero balance by @BitHighlander in #411
• fix(pairing): export every known account in the mobile pairing payload by @BitHighlander in #409
• fix(evm): the relay swap path had the same Pioneer zero-default, and it lied worse by @BitHighlander in #414
• fix(dashboard): always show the chain list, spinner per pending balance by @BitHighlander in #410
• fix: a failed lookup is not a zero — builders, send form, swap dialog by @BitHighlander in #415
• fix(swap): say "enable AdvancedMode" instead of "Action cancelled" by @BitHighlander in #417
• fix(solana): confirm native SOL after a swap, and stop the circular USD check by @BitHighlander in #418
• fix(swap): make the AdvancedMode path an opt-in, and pin the routing by @BitHighlander in #419
• fix(windows-build): make hdwallet git-dep and zcash-cli sidecar build on Windows by @BitHighlander in #416
• fix(swap): don't attach a Solana schema the device cannot verify by @BitHighlander in #420
• feat(clearsign): provider-key derivation for the BIP-85 ceremony by @BitHighlander in #421
• feat: add Robinhood Chain (eip155:4663) to vault chain registry by @sktbrd in #423
• fix(setup): condense firmware authenticity review by @BitHighlander in #424
• feat(solana): authenticate Relay LUT routes without blind signing by @BitHighlander in #426
• feat(clearsign): authenticate Portals EVM swaps by @BitHighlander in #427

Full Changelog: v1.5.3...v1.5.4

What's Changed

• Release v1.5.3 → master by @BitHighlander in #412
• Back-merge master into develop after v1.5.3 by @BitHighlander in #413
• fix(evm): a failed balance fetch is not a zero balance by @BitHighlander in #411
• fix(pairing): export every known account in the mobile pairing payload by @BitHighlander in #409
• fix(evm): the relay swap path had the same Pioneer zero-default, and it lied worse by @BitHighlander in #414
• fix(dashboard): always show the chain list, spinner per pending balance by @BitHighlander in #410
• fix: a failed lookup is not a zero — builders, send form, swap dialog by @BitHighlander in #415
• fix(swap): say "enable AdvancedMode" instead of "Action cancelled" by @BitHighlander in #417
• fix(solana): confirm native SOL after a swap, and stop the circular USD check by @BitHighlander in #418
• fix(swap): make the AdvancedMode path an opt-in, and pin the routing by @BitHighlander in #419
• fix(windows-build): make hdwallet git-dep and zcash-cli sidecar build on Windows by @BitHighlander in #416
• fix(swap): don't attach a Solana schema the device cannot verify by @BitHighlander in #420
• feat(clearsign): provider-key derivation for the BIP-85 ceremony by @BitHighlander in #421
• feat: add Robinhood Chain (eip155:4663) to vault chain registry by @sktbrd in #423
• fix(setup): condense firmware authenticity review by @BitHighlander in #424
• feat(solana): authenticate Relay LUT routes without blind signing by @BitHighlander in #426
• feat(clearsign): authenticate Portals EVM swaps by @BitHighlander in #427

Full Changelog: v1.5.3...v1.5.4