From 72589eb5bfeadf827fa48454ff9e9f3cbad78eb1 Mon Sep 17 00:00:00 2001 From: The MMGen Project Date: Mon, 9 Nov 2026 09:42:03 +0000 Subject: [PATCH] Version 17.0.0 --- doc/release-notes/release-notes-v17.0.0.md | 92 ++++++++++++++++++++++ mmgen/data/version | 2 +- 2 files changed, 93 insertions(+), 1 deletion(-) create mode 100644 doc/release-notes/release-notes-v17.0.0.md diff --git a/doc/release-notes/release-notes-v17.0.0.md b/doc/release-notes/release-notes-v17.0.0.md new file mode 100644 index 00000000..10211d3b --- /dev/null +++ b/doc/release-notes/release-notes-v17.0.0.md @@ -0,0 +1,92 @@ +### MMGen Wallet Version 17.0.0 Release Notes + +This version of MMGen Wallet introduces THORChain memoless swaps and XMR swaps. +These features are enabled in the test suite only for now, but mainnet support +can easily be switched on when they go live on the THORChain network. + +Most importantly for Monero users, this version introduces transaction data +integrity checking during the XMR signing process. This critical security +upgrade ensures that the change address in the transaction belongs to your +wallet and that the amount shown is going to the destination shown, preventing +an attacker from stealing your funds in the event your online installation is +ever compromised. These checks were always performed by the wallet for non- +privacy coins but were regrettably overlooked for Monero. Monero users are +thus urgently advised to upgrade. + +The release also includes some minor bugfixes, a new transaction versioning +system, more secure handling of legacy transaction files, and lots of code +cleanups suggested by static analyzers, so an upgrade will benefit all users. + +As an afterword to the Monero security fix, it must be mentioned that no system, +however secure, can do everything for the user. When sending funds to an outside +address, for example, the offline installation has no way of knowing whether the +destination and amount are what the user intended. A good rule of thumb is to +always check the offline signing summary to ensure that the transaction type is +correct and, for transfers, that the address and amount are correct. This advice +applies to all coins, by the way, not just Monero. + +#### Important new features: + + - ffe488ff, d9e24494, ff35b01c THORChain memoless swaps (testing only) + - ea9c2d29 THORChain XMR swaps (testing only) + - 2fe498b1 transaction integrity checking for XMR + +#### Other features and improvements: + + - ef61dd10 XMR subaddress generation + - f17416ca XMR compat: encapsulate legacy transaction data + - 13623ed9 mmgen-swaptxcreate: add `--quote` option + - 8a23f986 new `mmgen-remote` utility + - 9666e687 XMR compat: support viewing of transaction files via `mmgen-tool` + - 5e41407b XMR: change handling of default datadirs + +#### Testing: + + - 75b881a6 keygen: move unsafe pubkey generation backends to test suite + - b036207b remove test-related env vars from production code + +#### Security: + + - 7e2aa808 transaction versioning + - 33773ecf new `allow_legacy_tx_files` and `forbid_version_mismatched_tx_files` options + - dd714815, 852cdeda tx.file: refuse to parse legacy TX files for signing ops + - 256970f3 setup.py extmod: convert gcc warnings to errors + +Python requirement: >= 3.11 (tested on 3.11, 3.12, 3.13, 3.14 and 3.15) + +This release has been tested on the following platforms: + + NixOS 26.05 / x86_64 + Arch Linux 2026-11-06 [Python 3.14.9] / x86_64 + Debian 14 (Forky) [Python 3.14.6] / x86_64 + Debian 13 (Trixie) [Python 3.13.3] / x86_64 (+) + Debian 12 (Bookworm) [Python 3.11.2] / x86_64 + Debian 13 (Trixie) [Python 3.15.2 free-threaded] / x86_64 (++) + Ubuntu 26.04 (Resolute) [Python 3.14.4] / x86_64 + Ubuntu 24.04 (Noble) [Python 3.12.3] / x86_64 + Radxa Debian 12 (Bookworm) [Python 3.11.2] / Radxa Rock 5B [arm64] (*, **) + Armbian Debian 13 (Trixie) / Nano Pi M6 [arm64] (**, +) + Armbian Debian 13 (Trixie) / Banana Pi F3 [riscv64] (***, +, +++) + Windows 11 Enterprise / MSYS2 2026-06-11 (Python 3.14.7) / x86_64 [qemu] (no Reth) + macOS 13.7.6 (Ventura) / Homebrew 7.0.12 (Python 3.15.2, Bash 5.3.9) / x86_64 [qemu] + + Notes: + + * (see notes to previous release) + +and with the following coin daemon versions: + + Bitcoin Core 31.1 + Bitcoin Cash Node 29.1 + Litecoin Core 0.21.5.6 + Monero CLI 0.18.5.4 + Go Ethereum (Geth) 1.17.5 + Rust Ethereum (Reth) 2.8.1 (2.2.0 on macOS, 2.3.0 on NixOS) + Parity Ethereum 2.7.2 + +Solc 0.8.26 or newer is required for ERC20 token contract creation + +Coin address generation has been additionally tested using the following +reference tools: + + * (see reference tools list to previous release) diff --git a/mmgen/data/version b/mmgen/data/version index d3eb0db8..aac58983 100644 --- a/mmgen/data/version +++ b/mmgen/data/version @@ -1 +1 @@ -16.3.0dev25 +17.0.0