qeth 0.24.0

Trezor hardware wallets, and qeth keeps working when Blockscout rate-limits it.

Added

Trezor support. Add → Trezor Account… scans a connected Trezor for your
accounts — BIP44 (Trezor Suite / MetaMask layout, read from a single device
call), Ledger Live, or Legacy — and signs EIP-1559 and legacy transactions,
personal_sign messages and EIP-712 typed data on the device, which names the
chain and token. Before every signature qeth checks the connected Trezor really
holds the address.

• Passphrase wallets each get their own branch (keyed by the wallet's
  fingerprint). A wrong or different passphrase is refused rather than signing
  for the wrong account, and the next attempt asks for the passphrase again;
  every Scan asks too, so you choose which wallet to import.
• PIN and passphrase are entered on the device; a Trezor One's PIN grid and a
  Safe 7's pairing code are asked for in a dialog.
• Every package ships it. On Linux your user needs USB access to the device —
  install Trezor's udev rules if
  your distro doesn't already.

Verified end to end on a Trezor Safe 3 (accounts, a signed and sent transaction,
passphrase wallets). The Trezor One PIN grid and Safe 7 pairing are implemented
but not yet tested on hardware.

Fixed

"Couldn't load transactions: HTTP Error 429". Without an Etherscan key,
Blockscout's per-chain v1 API now allows only 10 requests an hour, so the
Transactions tab failed almost immediately and token discovery fell back to a
top-N scan. Transaction history and token discovery now use Blockscout's REST v2
API (~180 requests / 30 s). Also:

• A failed explorer fetch no longer empties the transaction list — known history
  (and your pending transactions) stay on screen with a note under them, and
  retries back off.
• qeth asks the explorer only for history it doesn't have: a newly sent
  transaction is recorded locally, and sends made elsewhere are detected from
  the on-chain nonce — not by re-reading the newest page on every open.
• A long status message no longer squeezes the Wallets column to nothing.

Some explorer lookups (Activity column coins, method names, Approvals) still use
the old v1 API; adding an Etherscan key (beside the chain selector) avoids its
limit entirely.

ENS names are discovered from four sources instead of one, and a gap in one
indexer no longer makes qeth forget a name you own.

Tokens: held tokens are re-priced even when discovery misses them, and the
selected token stays selected across a refresh.

JSON-RPC: wallet-namespaced methods are never proxied to the chain's RPC
(the Frame extension's polling no longer costs RPC requests).

Install

.rpm (Fedora), .deb (Mint/Ubuntu and Debian 13/LMDE), .AppImage,
.flatpak, and .dmg (macOS arm64, macOS 13+). Each has a -verify variant
bundling Helios.

Gentoo users: net-p2p/qeth-0.24.0 is in the
overlay, now with USE=trezor and
Python 3.14 support.

macOS

Still ad-hoc signed, not notarized — clear the quarantine flag your browser
sets on the download before opening it:

xattr -dr com.apple.quarantine ~/Downloads/qeth-0.24.0-macos-arm64.dmg

Launch with open (not Contents/MacOS/qeth) so the camera permission prompt is
attributed to qeth.

Browser extension

• Chrome — install from the
  Chrome Web Store,
  or load the attached qeth-0.22.3-chrome.zip unpacked.
• Firefox — install the attached, Mozilla-signed qeth-0.23.1.xpi via
  about:addons → gear → Install Add-on From File…. A public addons.mozilla.org
  listing is in review.

The extension is a thin relay to 127.0.0.1:1248; its version trails the app
whenever a store review is pending.

qeth 0.23.1

A small release: one user-facing fix, and macOS gains the -verify build.

Fixed

ENS management buttons were greyed out for accounts that can sign. The
record / transfer / subdomain actions gated on a hardcoded list of signer
sources that omitted air-gapped (QR) accounts — so a name whose manager was an
air-gapped wallet showed every button disabled, with no explanation.

The gate now keys on the on-chain role alone (registry controller /
registrant), which is what actually decides whether the write would succeed.
Signing ability is checked where the rest of qeth checks it — at signing time,
which reports "no known signer" — so a watch-only account can now open the flow
too and read the simulated events without broadcasting.

Added

macOS -verify build. qeth-verify-0.23.1-macos-arm64.dmg bundles the
Helios light client, so transaction previews run against proof-verified state
out of the box. macOS now has the same normal/verify pair as the .rpm,
.deb, AppImage and Flatpak.

Install

.rpm (Fedora), .deb (Mint/Ubuntu and Debian 13/LMDE), .AppImage,
.flatpak, and .dmg (macOS arm64, macOS 13+). Each has a -verify variant
bundling Helios.

Gentoo users: net-p2p/qeth-0.23.1 is in the
overlay.

macOS

Still ad-hoc signed, not notarized — macOS will refuse to open it until you
clear the quarantine flag your browser sets on the download:

# clear it on the .dmg BEFORE mounting (a mounted image is read-only)
xattr -dr com.apple.quarantine ~/Downloads/qeth-0.23.1-macos-arm64.dmg
# ...or on the app after copying it to /Applications
xattr -dr com.apple.quarantine /Applications/qeth-macos.app

Check whether it's even set — downloads made with curl/gh usually aren't
quarantined, only browser downloads:

xattr -p com.apple.quarantine <file>    # no output → nothing to clear

Launch with open rather than running Contents/MacOS/qeth directly: macOS
attributes a camera permission request to whichever app launched the process,
so a terminal launch asks on Terminal's behalf and the QR scanner won't work.

A Developer ID-signed and notarized build, which needs none of this, is
prepared in CI and waiting only on an Apple Developer enrolment.

Browser extension

The connector extension lets dapps in the browser reach the wallet.

• Chrome — install from the
  Chrome Web Store,
  or load the attached qeth-0.22.3-chrome.zip unpacked (chrome://extensions
  → Developer mode → Load unpacked).
• Firefox — install the attached, Mozilla-signed qeth-0.23.1.xpi via
  about:addons → gear → Install Add-on From File…. It is self-distributed
  rather than listed on addons.mozilla.org, so this file is the only way to get
  it. The add-on id is firefox@qeth.eth; the earlier wallet@qeth.eth builds
  are superseded and should be removed if you installed one.

The extension is a thin relay to 127.0.0.1:1248 and works with this release —
its version trails the app whenever a store review is pending.

qeth 0.23.0

Highlights

macOS support. qeth now builds a native .app bundle, so the QR scanner can
actually obtain camera permission — macOS grants camera access to an application
identity, which a bare python process doesn't have, and the scanner used to
sit at "Starting camera…" forever. CI builds and verifies the bundle on Apple
Silicon on every push. Camera permission handling and the bundle recipe come
from @BlinkyStitt's PR #25 — thank you.

Batched calls are decoded. A multicall used to render as one bytes
argument — kilobytes of hex — hiding the calls it actually performs. Now it
shows them:

multicall(
    data: bytes[] = [
        setAccountData(verifier: address = 0xC727CB1D…, …),
        claim(platform: address = 0x8c2c5A29…, campaignId: uint256 = 1804, …)
    ]
)

The same applies to Safe transactions — both execTransaction forwarding a
single call and multiSend batches, decoded against each target's own ABI, with
DELEGATECALL entries flagged (the Safe runs that code as itself). An entry
whose contract isn't verified keeps its bare selector rather than being guessed
at from the 4-byte database, whose entries collide: 0xa9059cbb resolves there
to a crafted workMyDirefulOwner(uint256,uint256) as readily as to transfer,
and a confident wrong name in a signing dialog is worse than hex.

Decoded calls name what they touch. An address belonging to one of your
wallets is annotated with that wallet's label; a token outside every curated
list is named from its on-chain symbol() — rendered italic, because that
name is self-reported and forgeable (address-poisoning spam routinely calls
itself USDC), versus the bold, logo-bearing form for a vouched-for token.

Dapp compatibility. wallet_requestPermissions, wallet_getPermissions and
wallet_revokePermissions (EIP-2255) are implemented instead of refused. Some
wallet libraries use wallet_requestPermissions as their connect action, so
those sites previously reported a failed connection.

Preview accuracy. The verified-simulation fork floor now also tracks
incoming ERC-20 transfers, account-wide — a token that arrived seconds ago is no
longer invisible to a preview that goes through a router.

Fixes

• The bundled top-token seed never loaded on a fresh install — its path was
  one directory too deep. A machine that had run qeth before masked it with the
  refreshed runtime cache, so only a clean environment ever showed it.
• Test hermeticity: the icon cache was the one on-disk store the fixtures didn't
  redirect, so tests read and wrote the developer's real ~/.qeth/icons.
• Twelve behaviours pinned by regression tests found via mutation testing
  (4139 mutants, 72% score) — including the Approvals prune-safety guard, whose
  only failure case tested had both halves false, so relaxing it changed
  nothing and went green.

Install

.rpm (Fedora), .deb (Mint/Ubuntu and Debian 13/LMDE), .AppImage and
.flatpak as before. Each has a -verify variant that bundles the Helios light
client so transaction previews run against proof-verified state out of the box.

macOS (new, arm64)

qeth-0.23.0-macos-arm64.dmg — Apple Silicon, macOS 13 or newer.

This build is ad-hoc signed, not notarized. macOS will refuse to open it
until you clear the quarantine flag your browser sets on the download. That is
expected, and the flag exists for good reason — only do this because you trust
the source:

# after copying qeth-macos.app out of the .dmg into /Applications
xattr -dr com.apple.quarantine /Applications/qeth-macos.app
open /Applications/qeth-macos.app

Or clear it on the disk image before mounting, which avoids the refusal
dialog entirely (a mounted .dmg is read-only, so you can't do it in there):

xattr -dr com.apple.quarantine ~/Downloads/qeth-0.23.0-macos-arm64.dmg

You can check whether the flag is even set — downloads made with curl or gh
generally aren't quarantined, only browser downloads:

xattr -p com.apple.quarantine <file>    # no output → nothing to clear

Launch with open rather than running Contents/MacOS/qeth directly: macOS
attributes a camera permission request to whichever app launched the process, so
running it from a terminal asks on Terminal's behalf and won't exercise the
bundle identity.

A Developer ID-signed and notarized build — which needs none of the above — is
planned for a later release.

qeth 0.22.0

qeth 0.22.0

Token icons

• Fixed missing icons for tokens whose logo is served over IPFS (e.g. UNI):
  ipfs:// logos now resolve through an HTTPS gateway, the list merge prefers
  a directly-fetchable http(s) logo over a non-http one, and a row that
  missed its icon on first paint re-requests it on the next discovery.

Faster new-account load

• The token list now renders the native/gas asset and popular held tokens
  immediately, then fills in vaults and the tail — instead of a blank list
  until the whole discovery pipeline finishes — with USD values fetched for
  the visible holdings first. No more blank blink when more tokens arrive
  mid-scan.

---

Install: RPM (Fedora), .deb (Ubuntu/Mint, LMDE/Debian 13), AppImage,
Flatpak — each in a normal and a Helios-verified (-verify) variant. Gentoo:
net-p2p/qeth in the qeth-gentoo overlay.
Browser connector: Firefox .xpi (AMO-signed) + Chrome zip in
extensions/.

qeth 0.20.0

A large release rolling up everything since 0.16.0.

Highlights

Air-gapped QR signer (Keystone / Keycard)

Import an air-gapped account and sign transactions, personal messages, and EIP-712 typed data over an animated-QR + camera exchange (BC-UR / EIP-4527).

ENS management

Manage names you own from the ENS tab: set the ETH address, text records, and IPFS content; add and remove subdomains; set the manager; renew and transfer names. Resolution is routed through a mainnet light client (Helios) with a verified ✓ badge, and custom text-record keys are remembered and recovered from your own history.

On-chain vault & LP pricing + own-history discovery

Prices vault/LP tokens the market APIs miss — ERC-4626, Yearn- and Yield-Basis-style shares, Curve LPs, and Uniswap-V2 LPs — read directly from chain state. Discovers tokens you obtained through your own transactions and prices those too. Vault tokens show the underlying asset with a sparkle badge; LP tokens stack their pooled coins.

Accounts & navigation

• Ctrl+F browser-style find bar to filter accounts by label or address (↑/↓ steps through matches).
• Multiple device subtrees per source, each with an editable label pill.

Safety & identity

• Keyless contract / recipient identity (public name-tag, deployer, familiarity) on the details, send, and signing rows.
• Pre-sign transaction simulation with a token/balance-change preview (Helios-verifiable).
• A curated allowlist so non-transferable governance locks (veCRV, vlCVX, vlSDT, …) stop reading as "suspected scam".
• Gas policy: estimate against pending and latest, take the higher, honour a dapp's gas as a floor.

Packaging & security

• Dependency bump clearing the Pillow advisories (uv audit clean).
• 10-asset set: .rpm (Fedora), .deb (Mint/Ubuntu and LMDE/Debian 13), AppImage, and Flatpak — each in a normal and a -verify variant that bundles a Helios light client for out-of-the-box proof-verified previews.

Install

Grab the package for your distro below. Native .rpm/.deb link the system Qt so your desktop theme applies; Flatpak/AppImage are portable. The -verify builds bundle Helios.

qeth 0.16.0

A reliability release: large air-gapped QR signatures now transmit dependably, and the token panel is hardened against price-API hiccups.

Fixes & improvements

• Air-gapped QR signing — large transactions. A big signing request (e.g. a multicall carrying Merkle-Patricia proofs, which fragments into ~100+ animated-QR frames) could stall some hardware wallets at 0%. qeth now sizes each frame's QR to ~version 12 — fewer, still-readable frames, so the whole transfer finishes faster — and re-injects the self-recovering fragments every cycle, so a wallet that locks on after the first pass (or briefly loses sync) still completes. It's a transmit-order change only: the parts are byte-identical and spec-valid, so a Keystone reads the stream unchanged.
• Token prices — a DefiLlama outage no longer empties the list. A DefiLlama API change began returning HTTP 404 for over-long batch request URLs, so every price request failed and the "hide unpriced tokens" rule emptied the entire token panel. Prices are now batched by URL length, and the panel falls back to the last-known cached price during any price-source outage instead of hiding your holdings.

Downloads

Each format ships in a normal and a -verify variant (the verify build bundles a Helios light client, so transaction previews are proof-verified against Ethereum consensus out of the box):

Distro	File
Fedora	qeth-0.16.0-1.fc44.x86_64.rpm
Mint 22 / Ubuntu 24.04	qeth_0.16.0_amd64.deb
Debian 13 / LMDE 7	qeth_0.16.0_debian13_amd64.deb
Any distro (portable)	qeth-0.16.0-x86_64.AppImage
Flatpak	qeth-0.16.0.flatpak

qeth 0.15.1

A patch release, plus a new native package for Debian 13 "Trixie" / LMDE 7 "Gigi".

New: Debian 13 / LMDE 7 package

A natively-themed .deb for Debian 13 and its derivatives (LMDE 7 "Gigi"). Debian 13 ships PySide6 6.8 in its own repositories, so — unlike the Mint/Ubuntu build, which compiles Qt bindings from source — this package uses the system Qt for native theming with no bundled Qt, and depends only on stock Debian 13 packages (no PPA):

sudo apt install ./qeth_0.15.1_debian13_amd64.deb

Fixes & improvements

• Signing now routes to the account row you select: when one address is held by both a Ledger and an Air-gapped (QR) record, choosing the Air-gapped row and hitting Send no longer demands the Ledger device ("Ledger not connected").
• QR air-gapped signer: camera capture + decode pipeline retuned for reliable reads; already-added accounts are greyed out in the Ledger/QR/import scan lists.
• Sign dialog: the ERC-20 approve allowance is now editable, and calldata the ABI doesn't describe is surfaced explicitly as "additional calldata".
• Chain RPC dialog: a live reachability verdict for the URL you type or paste.
• Verified previews (Helios): reroute off a proof-incapable RPC so verified sims work, and respawn the sidecar when a chain's execution-RPC changes.
• Transactions: recover a TOKEN→native swap's received ETH via a node trace when the explorer's internal-tx feed lags.

Downloads

Each format ships in a normal and a -verify variant (the verify build bundles a Helios light client, so transaction previews are proof-verified against Ethereum consensus out of the box):

Distro	File
Fedora	qeth-0.15.1-1.fc44.x86_64.rpm
Mint 22 / Ubuntu 24.04	qeth_0.15.1_amd64.deb
Debian 13 / LMDE 7	qeth_0.15.1_debian13_amd64.deb
Any distro (portable)	qeth-0.15.1-x86_64.AppImage
Flatpak	qeth-0.15.1.flatpak

qeth 0.15.0

Air-gapped hardware-wallet signing over QR codes — plus the QR camera now works in every package, context menus that mirror their buttons, and a more reliable verified-ENS badge.

Air-gapped QR signer

Sign transactions, messages, and typed data with a QR-only hardware wallet (Keystone / Keycard-style, BC-UR + EIP-4527) — no cable, no USB.

• Add an air-gapped (QR) wallet — scan your device's account-export QR; qeth derives your addresses locally (BIP44 / Ledger-Live paths).
• Sign over QR — the signing request goes out as a QR (an animated multi-part UR for large calldata, via a proper fountain encoder), and you scan the device's signature back in with your webcam.
• Full round-trip for transactions, personal_sign messages, and EIP-712 typed data.
• Built on a pluggable signer registry, so future signer types slot in alongside Ledger.

The QR camera works in every package

The live camera (QtMultimedia + FFmpeg) and the QR decode stack (zxing-cpp) are now shipped or depended-on across all four formats — RPM, .deb, Flatpak, and AppImage — so the scanner works out of the box however you installed qeth. (FFmpeg is used only to capture raw camera frames for QR reading; no patent-encumbered codecs are exercised.)

Context menus mirror the buttons

A row's right-click menu now offers the same per-item actions as the button row below it, everywhere:

• Tokens — Send is on every row's menu, including native ETH (which previously had no menu at all).
• Accounts — Sign / QR / Label added to the tree menu.
• ENS — Add-record / Add-subdomain buttoned to match the menu.

Wallets & accounts

• Repeat addresses (the same address held under two branches — e.g. a Ledger and a QR wallet) keep their own rows and labels; signing, removal, and Send route by the selected branch.
• Drag to reorder top-level account branches.
• Full derivation paths shown for Ledger + QR schemes (no ellipsis); empty source groups are hidden.

Verified-ENS badge reliability

The green ✓ badge (ENS resolved through a strict mainnet Helios light client) now lands reliably — fixes for a block-order gate that suppressed it on nearly every load, a status glyph that rendered blank, and wallet-tree rebuilds that dropped the in-flight verification.

Also

• Native ETH received in a TOKEN→ETH swap now shows up.
• The fee estimate renders on macOS.
• In-flight workers are joined on quit (no more Ctrl+C SIGABRT / "closed unexpectedly").
• A dapp can no longer learn your upstream RPC's host from a transport-failure error.

Install

Two flavors of every package are attached, same as before:

• Normal (qeth_…) — verified mode (preview + ENS) is optional; install a Helios light client yourself (heliosup) and qeth auto-detects it.
• -verify (qeth-verify_…) — batteries included: bundles Helios, so verified previews and verified ENS work out of the box. The only way verified mode works in the Flatpak (the sandbox can't reach a host binary). Slightly larger; the verify AppImage needs glibc ≥ 2.39.

The QR scanner needs a webcam; on Flatpak, grant camera access when prompted. Pick one package. See the README for per-distro instructions.

qeth 0.14.0

Manage your ENS names from the wallet, plus a broad correctness-and-hardening pass over balances and the transaction paths.

ENS name management

The ENS panel graduated from showing your names to managing them.

• Owner + manager roles in the tree. Each name shows who owns it (the registrant / NFT holder) and who manages it (the controller), so a delegated setup is legible at a glance.
• Finds names you own but don't manage. Previously a name whose manager was delegated elsewhere (a common DAO setup — e.g. crv.eth) went undiscovered. qeth now enumerates the names you hold as registrant and surfaces them, not just the ones you control.
• Subdomains. Subdomains of your names are surfaced (including ones sitting in another of your accounts' caches), and you can reassign an unwrapped subdomain's manager — or set the manager on a subdomain of a parent you own.
• Actions. Set manager, Transfer, Extend, and Edit records — from a selection-tracking action bar and the context menu, with keyboard mnemonics and Ctrl+C to copy a row.
• Expiry read on-chain. Name expiry now comes from the registrar's nameExpires rather than an indexer's grace-inclusive date, so the renew dialog and the displayed date are authoritative.

Balance correctness

A systematic pass to make the token list always reflect the chain, in order.

• Every balance path is block-ordered. Discovery, the live WebSocket re-read, the native poll, and receipt credits all go through one block-ordered writer, so a slower read can never overwrite a fresher one. Discovery is now a merge, not a replace.
• Arbitrum stuck-balance fix. On Arbitrum, block.number is the L1 block; stamping balances with it froze a just-sent token. Balances are now stamped with the real L2 block (via ArbSys).
• Silently-dropped WS updates self-heal. If the ERC-20 Transfer log subscription dies silently while the socket stays warm, the displayed balances now reconcile on a timer instead of sitting stale for minutes.
• Recognised-but-unpriced tokens (ones the price source can't value, e.g. sUSD/EURT) get a grace window so a just-received token shows while its price loads, then stops cluttering the list.

Reliability & hardening

• Race-condition audit. A pass across the transaction, ENS, store, and lifecycle paths: same-nonce collision fixes, deduped confirmations, stale gas estimates dropped by generation, per-generation epochs that discard out-of-order async landings, isolated store snapshots, and a fix for a pycares shutdown segfault (ThreadedResolver).
• Single-instance guard. Launching qeth while it's already running hands off and raises the existing window instead of starting a second copy.
• No RPC host leak. A dapp can no longer learn your upstream RPC's host:port from a transport-failure error.
• Helios self-heals a stale weak-subjectivity checkpoint instead of failing to start verified mode.

Install

Two flavors of every package are attached, same as before:

• Normal (qeth_…) — verified mode (preview + ENS) is optional; install a Helios light client yourself (heliosup) and qeth auto-detects it.
• -verify (qeth-verify_…) — batteries included: bundles Helios, so verified previews and verified ENS work out of the box. The only way verified mode works in the Flatpak (the sandbox can't reach a host binary). Slightly larger; the verify AppImage needs glibc ≥ 2.39.

Pick one. See the README for per-distro instructions.

qeth 0.13.0

Desktop notifications for incoming/outgoing transfers, and ENS resolution you can verify.

Desktop notifications

qeth now raises a native desktop notification when ETH or a token moves in or out of your on-screen wallet — Received 5 USDC, Sent 0.1 ETH — with the token/coin logo and a direction badge (green ↓ received, blue ↑ sent) as the notification icon.

• Both directions, ETH and ERC-20 tokens. The amount is decoded from the token's own symbol/decimals.
• Delivered straight through the freedesktop notification service, so the custom icon actually renders (Qt's tray drops it on some daemons, e.g. xfce4-notifyd) — and it needs no system tray at all.
• Toggle from the tray menu ("Transaction notifications"); on by default.

Verified ENS resolution

When a Helios light client is available, ENS name ↔ address resolution is proof-verified against Ethereum consensus instead of trusted from a remote RPC (ENS resolution is pure eth_calls, exactly the provable case). Verified resolutions carry the same green ✓ verified badge as the transaction preview, in the Send and Add-account dialogs.

• Strict: offchain (CCIP / gateway) names can't be passed off as verified — they resolve unverified (no badge) rather than overclaiming.
• Safety: if an ENS name resolves to a token contract (e.g. curve.eth → CRV), the Send dialog now shows a red "⚠ token contract" warning naming the token, instead of a reassuring "verified" pill — sending there usually burns the funds, so the danger wins over the mapping check.
• Auto-detected; QETH_HELIOS=0 to disable. Same chains as the verified preview.

Also

• Incoming ETH refreshes live. A plain ETH receive fires no token-transfer event, so it used to wait for the slow background sweep; now a once-a-minute balance read over the live WebSocket catches it promptly (and keeps the connection warm against idle-disconnect).

Install

Two flavors of every package are attached, same as before:

• Normal (qeth_…) — verified mode (preview + ENS) is optional; install a Helios light client yourself (heliosup) and qeth auto-detects it.
• -verify (qeth-verify_…) — batteries included: bundles Helios, so verified previews and verified ENS work out of the box. The only way verified mode works in the Flatpak (the sandbox can't reach a host binary). Slightly larger; the verify AppImage needs glibc ≥ 2.39.

Pick one. See the README for per-distro instructions.