2026-09-21 - 2026-09-24
Overview
7 Pull requests merged by 1 user
Merged
#392 fix: re-enable Confirm Delete after a delete, so a second one needs no reopen (closes #335)
Merged
#389 chore: keep the internal view id out of the release banner (closes #375)
Merged
#395 docs: a release procedure from a green main to tagged, packaged artifacts (closes #387)
Merged
#411 harden: bound the total network fee by gasLimit × fee, on both send paths (closes #399)
Merged
#394 fix: name a tracked or explorer-known token instead of "Unknown token" (closes #323)
Merged
#390 fix: say a second wallet's password is separate when one is chosen (closes #374)
Merged
#397 harden: keep the test recovery phrase out of release bundles, match committed keys by content (closes #351)
1 Pull request proposed by 1 user
Proposed
#412 security: announce a fresh EIP-6963 provider UUID per page load (closes #398)
8 Issues closed from 1 user
Closed
#173 decision: no browser in the agent environment, so several 1.0.0 items cannot have their DoD verified
Closed
#335 fix: Confirm Delete stays disabled after a successful wallet delete, so a second delete needs a popup reopen
Closed
#375 chore: the testnet and debug banners leak the internal view id, e.g. "[TESTNET] (approve-tx)"
Closed
#387 docs: a release procedure from a green main to tagged, packaged, distributed artifacts
Closed
#399 security: the transaction fee backstop is per-field, so the fee can reach thousands of ETH, and the wallet's own send path has no backstop at all
Closed
#323 fix: the approval screen says "Unknown token" for tokens whose symbol is already known
Closed
#374 fix: adding a second wallet silently accepts a different password, with nothing saying it is a separate one
Closed
#351 harden: the test recovery phrase ships inside the release artifacts, and the committed-key guard matches only by filename
13 Issues created by 1 user
Opened
#398 security: the EIP-6963 provider UUID is persisted and reused, so any site can read a stable per-install tracking identifier
Opened
#399 security: the transaction fee backstop is per-field, so the fee can reach thousands of ETH, and the wallet's own send path has no backstop at all
Opened
#400 harden: typed-data signing shows no warning for allowance-granting shapes and displays a primaryType it does not enforce
Opened
#401 decision: Argon2id runs at INTERACTIVE cost for the at-rest vault key
Opened
#402 harden: remembered site permissions are keyed by hostname only, dropping the scheme and port
Opened
#403 harden: personal_sign display decodes only hex and renders control and bidirectional characters verbatim, without the raw bytes
Opened
#404 harden: a page-supplied transaction nonce is honoured and shown only as a bare number
Opened
#405 harden: a page can open unbounded concurrent approval windows
Opened
#406 harden: a session (non-remembered) site connection cannot be revoked from the UI, and the remove-site message does nothing
Opened
#407 harden: origin attribution falls back to the top-level tab URL and then to the page-supplied origin
Opened
#408 decision: a connected site can switch the wallet's network with no prompt
Opened
#409 decision: eth_sign is signed as a personal message while its warning and the README describe raw-hash signing
Opened
#410 harden: runtime debug mode logs full request URLs and bodies, which can include RPC credentials
10 Unresolved Conversations
Open
#369
docs: README still says a genuine zero renders 0.0000, and the approval screen's refusal vocabulary is undocumented
Open
#393
docs: name every approval-screen amount string, fix stale zero claim (closes #369)
Open
#388
milestone 1.0.0 release readiness: user-facing fixes, security review, release procedure
Open
#396
infra: the mac-studio CI runner has run out of docker subnets, so every e2e job fails before checkout
Open
#386
decision: how 1.0.0 is distributed on Firefox (signing) and on Chrome (store or CRX)
Open
#383
security: pre-1.0 review of key handling, DEBUG mode and RPC/dApp input validation
Open
#385
verify: a human pass against a real network with real funds before the 1.0.0 tag
Open
#207
decision: a dApp-supplied gas limit is silently dropped, so the popup always re-estimates
Open
#245
harden: connectedSites is never cleared for a removed address or wallet
Open
#382
Review toward 1.0: identify and file all next steps