warden v0.1.9 — testnet preview (security review fixes)

One-click Windows desktop app for trying warden on BSC testnet.

What's new since v0.1.8: a full security review turned up and fixed five real issues:

• Closed an unauthenticated fund-sweep hole that was exploitable if you'd opted into LAN/phone access (WARDEN_HOST=0.0.0.0) — stored-key sweeps now require a one-time code from the machine's own terminal.
• Fixed misleading dashboard copy that claimed the owner key "never leaves this browser" (it correctly stays on your machine, just not literally the browser tab).
• Replaced the Telegram /link onboarding code with a real CSPRNG and a rate limit that can't be reset by switching chats.
• Fixed a smart-contract access-control bug in the (not-yet-deployed) drawdown-breaker contract that would have let anyone hijack and permanently freeze another account's breaker.
• Added an explicit warning when selecting a custom trading strategy, since those run with full access to your machine, not a sandboxed trading script.

Full details: docs/PROGRESS.md and the commit history.

⚠️ Testnet only. Uses BSC testnet (chain 97) — no real funds involved. Wallet keys are generated locally and stay on your device.

⚠️ Unsigned build. Windows SmartScreen will show a warning on first launch (expected for an unsigned installer, not a sign of malware) — click "More info" → "Run anyway".

Known limitation: the agent's account deploys and arms correctly, and the wallet/grant/permission-wall flow works end to end — but PancakeSwap and the tradeable tokens (WBNB/CAKE/BTCB/ETH) are mainnet-only deployments, so a real swap won't route on testnet. You'll see the wallet fund, the grant sign, and the agent arm and trade a simulated book at live prices; live swap execution needs a mainnet run.

Install

1. Download warden-Setup-0.1.9.exe below.
2. Run it — one-click install, no admin rights needed.
3. On first launch, follow the onboarding flow to create a testnet wallet and fund it from the BNB testnet faucet.