-
MMGen Wallet version 17.0.0 Stable
released this
2026-11-09 09:53:16 +00:00 | 0 commits to master since this releaseThis version of MMGen Wallet introduces THORChain memoless swaps and XMR swaps. These features are enabled in the test suite only for now, but mainnet support can easily be switched on when they go live on the THORChain network.
Most importantly for Monero users, this version introduces transaction data integrity checking during the XMR signing process. This critical security upgrade ensures that the change address in the transaction belongs to your wallet and that the amount shown is going to the destination shown, preventing an attacker from stealing your funds in the event your online installation is ever compromised. These checks were always performed by the wallet for non-privacy coins but were regrettably overlooked for Monero. Monero users are thus urgently advised to upgrade both online and offline installations.
The release also includes some minor bugfixes, a new transaction versioning system, more secure handling of legacy transaction files, and lots of code cleanups suggested by static analyzers, so an upgrade will benefit all users.
As an afterword to the Monero security fix, it must be mentioned that no system, however secure, can do everything for the user. When sending funds to an outside address, for example, the offline installation has no way of knowing whether the destination and amount are what the user intended. A good rule of thumb is to always check the offline signing summary to ensure that the transaction type is correct and, for transfers, that the address and amount are correct. This advice applies to all coins, by the way, not just Monero.
Important new features:
ffe488ffd9e24494ff35b01cTHORChain memoless swaps (testing only)ea9c2d29THORChain XMR swaps (testing only)2fe498b1transaction data integrity checking for XMR
Other features and improvements:
ef61dd10XMR subaddress generationf17416caXMR compat: encapsulate legacy transaction data13623ed9mmgen-swaptxcreate: add--quoteoption8a23f986newmmgen-remoteutility9666e687XMR compat: support viewing of transaction files viammgen-tool5e41407bXMR: change handling of default datadirs
Testing:
75b881a6keygen: move unsafe pubkey generation backends to test suiteb036207bremove test-related env vars from production code
Security:
7e2aa808transaction versioning33773ecfnewallow_legacy_tx_filesandforbid_version_mismatched_tx_filesoptionsdd714815852cdedatx.file: refuse to parse legacy TX files for signing ops256970f3setup.py extmod: convert gcc warnings to errors
Python requirement: >= 3.11 (tested on 3.11, 3.12, 3.13, 3.14 and 3.15)
This release has been tested on the following platforms:
NixOS 26.05 / x86_64 Arch Linux 2026-11-06 [Python 3.14.9] / x86_64 Debian 14 (Forky) [Python 3.14.6] / x86_64 Debian 13 (Trixie) [Python 3.13.3] / x86_64 (+) Debian 12 (Bookworm) [Python 3.11.2] / x86_64 Debian 13 (Trixie) [Python 3.15.2 free-threaded] / x86_64 (++) Ubuntu 26.04 (Resolute) [Python 3.14.4] / x86_64 Ubuntu 24.04 (Noble) [Python 3.12.3] / x86_64 Radxa Debian 12 (Bookworm) [Python 3.11.2] / Radxa Rock 5B [arm64] (*, **) Armbian Debian 13 (Trixie) / Nano Pi M6 [arm64] (**, +) Armbian Debian 13 (Trixie) / Banana Pi F3 [riscv64] (***, +, +++) Windows 11 Enterprise / MSYS2 2026-06-11 (Python 3.14.7) / x86_64 [qemu] (no Reth) macOS 13.7.6 (Ventura) / Homebrew 7.0.12 (Python 3.15.2, Bash 5.3.9) / x86_64 [qemu] Notes: *, **, ***, +, ++, +++ (see notes to previous release)and with the following coin daemon versions:
Bitcoin Core 31.1 Bitcoin Cash Node 29.1 Litecoin Core 0.21.5.6 Monero CLI 0.18.5.4 Go Ethereum (Geth) 1.17.5 Rust Ethereum (Reth) 2.8.1 (2.2.0 on macOS, 2.3.0 on NixOS) Parity Ethereum 2.7.2Solc 0.8.26 or newer is required for ERC20 token contract creation
Coin address generation has been additionally tested using the following reference tools:
* (see reference tools list to previous release)Downloads
-
Source code (ZIP)
2 downloads
-
Source code (TAR.GZ)
3 downloads