• v17.0.0 72589eb5bf

    mmgen released this 2026-11-09 09:53:16 +00:00 | 0 commits to master since this release

    Signed by mmgen
    GPG key ID: 3F8B1861E32B7DA2

    This version of MMGen Wallet introduces THORChain memoless swaps and XMR swaps. These features are enabled in the test suite only for now, but mainnet support can easily be switched on when they go live on the THORChain network.

    Most importantly for Monero users, this version introduces transaction data integrity checking during the XMR signing process. This critical security upgrade ensures that the change address in the transaction belongs to your wallet and that the amount shown is going to the destination shown, preventing an attacker from stealing your funds in the event your online installation is ever compromised. These checks were always performed by the wallet for non-privacy coins but were regrettably overlooked for Monero. Monero users are thus urgently advised to upgrade both online and offline installations.

    The release also includes some minor bugfixes, a new transaction versioning system, more secure handling of legacy transaction files, and lots of code cleanups suggested by static analyzers, so an upgrade will benefit all users.

    As an afterword to the Monero security fix, it must be mentioned that no system, however secure, can do everything for the user. When sending funds to an outside address, for example, the offline installation has no way of knowing whether the destination and amount are what the user intended. A good rule of thumb is to always check the offline signing summary to ensure that the transaction type is correct and, for transfers, that the address and amount are correct. This advice applies to all coins, by the way, not just Monero.

    Important new features:

    Other features and improvements:

    • ef61dd10 XMR subaddress generation
    • f17416ca XMR compat: encapsulate legacy transaction data
    • 13623ed9 mmgen-swaptxcreate: add --quote option
    • 8a23f986 new mmgen-remote utility
    • 9666e687 XMR compat: support viewing of transaction files via mmgen-tool
    • 5e41407b XMR: change handling of default datadirs

    Testing:

    • 75b881a6 keygen: move unsafe pubkey generation backends to test suite
    • b036207b remove test-related env vars from production code

    Security:

    • 7e2aa808 transaction versioning
    • 33773ecf new allow_legacy_tx_files and forbid_version_mismatched_tx_files options
    • dd714815 852cdeda tx.file: refuse to parse legacy TX files for signing ops
    • 256970f3 setup.py extmod: convert gcc warnings to errors

    Python requirement: >= 3.11 (tested on 3.11, 3.12, 3.13, 3.14 and 3.15)

    This release has been tested on the following platforms:

    NixOS 26.05 / x86_64
    Arch Linux 2026-11-06 [Python 3.14.9] / x86_64
    Debian 14 (Forky) [Python 3.14.6] / x86_64
    Debian 13 (Trixie) [Python 3.13.3] / x86_64 (+)
    Debian 12 (Bookworm) [Python 3.11.2] / x86_64
    Debian 13 (Trixie) [Python 3.15.2 free-threaded] / x86_64 (++)
    Ubuntu 26.04 (Resolute) [Python 3.14.4] / x86_64
    Ubuntu 24.04 (Noble) [Python 3.12.3] / x86_64
    Radxa Debian 12 (Bookworm) [Python 3.11.2] / Radxa Rock 5B [arm64] (*, **)
    Armbian Debian 13 (Trixie) / Nano Pi M6 [arm64] (**, +)
    Armbian Debian 13 (Trixie) / Banana Pi F3 [riscv64] (***, +, +++)
    Windows 11 Enterprise / MSYS2 2026-06-11 (Python 3.14.7) / x86_64 [qemu] (no Reth)
    macOS 13.7.6 (Ventura) / Homebrew 7.0.12 (Python 3.15.2, Bash 5.3.9) / x86_64 [qemu]
    
    Notes: *, **, ***, +, ++, +++ (see notes to previous release)
    

    and with the following coin daemon versions:

    Bitcoin Core 31.1
    Bitcoin Cash Node 29.1
    Litecoin Core 0.21.5.6
    Monero CLI 0.18.5.4
    Go Ethereum (Geth) 1.17.5
    Rust Ethereum (Reth) 2.8.1 (2.2.0 on macOS, 2.3.0 on NixOS)
    Parity Ethereum 2.7.2
    

    Solc 0.8.26 or newer is required for ERC20 token contract creation

    Coin address generation has been additionally tested using the following reference tools:

    * (see reference tools list to previous release)
    
    Downloads