2026-08-24 - 2026-09-24
Overview
10 Pull requests merged by 1 user
Merged
#392 fix: re-enable Confirm Delete after a delete, so a second one needs no reopen (closes #335)
Merged
#389 chore: keep the internal view id out of the release banner (closes #375)
Merged
#395 docs: a release procedure from a green main to tagged, packaged artifacts (closes #387)
Merged
#411 harden: bound the total network fee by gasLimit × fee, on both send paths (closes #399)
Merged
#394 fix: name a tracked or explorer-known token instead of "Unknown token" (closes #323)
Merged
#390 fix: say a second wallet's password is separate when one is chosen (closes #374)
Merged
#397 harden: keep the test recovery phrase out of release bundles, match committed keys by content (closes #351)
Merged
#391 fix: honour a transaction response only for a transaction approval (closes #262)
Merged
#381 fix: give every address a row of its own, so none wraps or is shortened (closes #380)
Merged
#190 milestone 1.0.0: approval-path security, build-integrity guard, e2e harness and filter coverage
3 Pull requests proposed by 1 user
Proposed
#388 milestone 1.0.0 release readiness: user-facing fixes, security review, release procedure
Proposed
#393 docs: name every approval-screen amount string, fix stale zero claim (closes #369)
Proposed
#412 security: announce a fresh EIP-6963 provider UUID per page load (closes #398)
16 Issues closed from 1 user
Closed
#173 decision: no browser in the agent environment, so several 1.0.0 items cannot have their DoD verified
Closed
#335 fix: Confirm Delete stays disabled after a successful wallet delete, so a second delete needs a popup reopen
Closed
#375 chore: the testnet and debug banners leak the internal view id, e.g. "[TESTNET] (approve-tx)"
Closed
#387 docs: a release procedure from a green main to tagged, packaged, distributed artifacts
Closed
#399 security: the transaction fee backstop is per-field, so the fee can reach thousands of ETH, and the wallet's own send path has no backstop at all
Closed
#323 fix: the approval screen says "Unknown token" for tokens whose symbol is already known
Closed
#374 fix: adding a second wallet silently accepts a different password, with nothing saying it is a separate one
Closed
#351 harden: the test recovery phrase ships inside the release artifacts, and the committed-key guard matches only by filename
Closed
#262 fix: an approval claimed when its window closes is orphaned, leaving the dApp promise unsettled forever
Closed
#236 harden: an oversized phishing delta erases the previously stored one, dropping to vendored-only coverage for up to 24h
Closed
#242 tokenList.js header comment says "511 tokens"; the array has 512
Closed
#246 harden: decimals || "18" collapses absent and zero if a backend ever sends numeric 0
Closed
#354 chore: a tracked token's symbol is ignored, so the approval screen says "Unknown token" for a token the user added by hand
Closed
#348 decision: who owns the Chrome CRX signing key, and does 1.0 require AMO signing for Firefox
Closed
#380 wallet view: addresses wrap and break the layout when a wallet has multiple addresses
Closed
#191 docs: TODO.md describes the old branch-from-main workflow and its Status/Next Step are stale
21 Issues created by 1 user
Opened
#380 wallet view: addresses wrap and break the layout when a wallet has multiple addresses
Opened
#382 Review toward 1.0: identify and file all next steps
Opened
#383 security: pre-1.0 review of key handling, DEBUG mode and RPC/dApp input validation
Opened
#384 release: bump the version to 1.0.0 in package.json and both manifests, as the last unit of the milestone
Opened
#385 verify: a human pass against a real network with real funds before the 1.0.0 tag
Opened
#386 decision: how 1.0.0 is distributed on Firefox (signing) and on Chrome (store or CRX)
Opened
#387 docs: a release procedure from a green main to tagged, packaged, distributed artifacts
Opened
#396 infra: the mac-studio CI runner has run out of docker subnets, so every e2e job fails before checkout
Opened
#400 harden: typed-data signing shows no warning for allowance-granting shapes and displays a primaryType it does not enforce
Opened
#408 decision: a connected site can switch the wallet's network with no prompt
Opened
#407 harden: origin attribution falls back to the top-level tab URL and then to the page-supplied origin
Opened
#406 harden: a session (non-remembered) site connection cannot be revoked from the UI, and the remove-site message does nothing
Opened
#405 harden: a page can open unbounded concurrent approval windows
Opened
#404 harden: a page-supplied transaction nonce is honoured and shown only as a bare number
Opened
#403 harden: personal_sign display decodes only hex and renders control and bidirectional characters verbatim, without the raw bytes
Opened
#402 harden: remembered site permissions are keyed by hostname only, dropping the scheme and port
Opened
#401 decision: Argon2id runs at INTERACTIVE cost for the at-rest vault key
Opened
#399 security: the transaction fee backstop is per-field, so the fee can reach thousands of ETH, and the wallet's own send path has no backstop at all
Opened
#398 security: the EIP-6963 provider UUID is persisted and reused, so any site can read a stable per-install tracking identifier
Opened
#409 decision: eth_sign is signed as a personal message while its warning and the README describe raw-hash signing
Opened
#410 harden: runtime debug mode logs full request URLs and bodies, which can include RPC credentials
17 Unresolved Conversations
Open
#369
docs: README still says a genuine zero renders 0.0000, and the approval screen's refusal vocabulary is undocumented
Open
#245
harden: connectedSites is never cleared for a removed address or wallet
Open
#207
decision: a dApp-supplied gas limit is silently dropped, so the popup always re-estimates
Open
#290
test: make test-e2e is flaky under host load — "the extension opened no approval window within 30000ms"
Open
#255
decision: a defective xprv wallet is told to use other software, but we hold the only key and will not export it
Open
#252
fix: flash messages longer than one line wrap and shift the layout, defeating the reserved-space policy
Open
#297
fix: the two dApp approval error containers shift 6px when an error appears
Open
#358
chore: V4 struct decodes target the deployed shape, and silently stop describing swaps if periphery adds a field
Open
#370
decision: a trailing PERMIT2_PERMIT replaces the swap's input side on the approval screen
Open
#279
fix: an unsupported method is reported to the page with no EIP-1193 code (4200)
Open
#283
Uniswap V2_SWAP_EXACT_OUT (command 0x09) is decoded by a function nothing calls
Open
#343
fix: the send and send-confirm screens render a sub-1e-6 balance and fee as 0.0
Open
#250
fix: a contract deployment shows a blank recipient on the wait and approval screens
Open
#377
fix: an unknown-scale token reads differently on Send than on the confirmation screen, and the fee error promises a retry that cannot help
Open
#287
flake: the Chrome e2e dApp signing prompt loses its page about one run in three under load
Open
#325
test: guard decimals:0 against the falsy trap, and de-duplicate toDecimals
Open
#372
chore: networks.js defines nativeCurrency and nothing reads it, so Sepolia balances and fees all read "ETH"