Cake Wallet / Monero.com

This commit is a user-facing feature update for the Cake Wallet app. It adds a new 'gradient-only' card background option and lets users pick different icon styles for their wallet balance cards. It also updates the local database to store these new preferences and refreshes many coin icon graphics. There is nothing in the changes that suggests a security vulnerability or malicious behavior.

This commit refactors how Cake Wallet's Bitcoin-family wallets (Bitcoin, Litecoin, Bitcoin Cash, Dogecoin) talk to Electrum servers. It adds batch RPC calls for balances, unspent outputs, and transaction history, and fixes some address-discovery edge cases. There is no direct evidence in the commit that this fixes an active security vulnerability; it appears to be a performance and reliability improvement. However, any bug in wallet balance or transaction discovery logic can affect whether users see correct funds, so it has indirect financial-relevance.

This commit is a routine user-interface polish. It swaps one image-loading widget for another so wallet icons appear correctly on the swap page, replaces the USDT icon SVG with a cleaned-up version, and updates a translated user-facing label from 'Add a read-only wallet from Cupcake or a cold wallet or recover a paper wallet' to 'Add an air-gapped cold wallet or recover a paper wallet' across all supported languages. There is no security-relevant code change.

This commit fixes Linux-specific app crashes and UI glitches in Cake Wallet. The main functional change is making the wallet correctly store and read true/false settings as numbers (1 or 0) in its SQLite database on Linux, where storing raw booleans was causing crashes. It also disables Lightning payments on platforms that don't support them and forces the Linux app to start in a tall phone-like shape instead of a wide landscape shape. There is no clear security vulnerability being patched; it reads as a stability and UI polish fix.

This commit fixes a small but potentially important bug in how the app looks up saved Monero node/server records by their ID. Previously, the code searched for a column literally named 'id', but the actual stored column name is held in a variable called selfIdColumn. If those names differ, lookups by ID would fail or behave unexpectedly. The change makes the lookup use the correct column name. There is no direct evidence this is a security vulnerability, but incorrect database lookups can sometimes cause app crashes, missing data, or in rare cases be chained into other issues.

This is a one-character Dart syntax fix that adds parentheses around a logical expression. It resolves a build/compilation error and does not change the intended behavior of the code. There is no security relevance.

This commit fixes how the wallet's settings store reloads its saved server/node list after a backup restore. Previously it relied on an in-memory box of Node objects passed as an argument; now it fetches each node directly from the local database by ID. The change also re-enables the reload call that had been commented out during backup restore. There is no direct evidence this is a security fix, but using stale or missing node records after a restore could in theory leave a wallet pointed at the wrong server.

This is a large code refactor that moves Cake Wallet's saved blockchain node list from the Hive key-value store to a SQLite database. It also updates the bundled default nodes for many cryptocurrencies, changes which node is the default for several coins, and adds labels/official flags. The change touches how the app picks which server it talks to when sending or receiving transaction data. There is no clear security bug in the diff, but any data migration this large carries some risk of losing or mis-mapping user node settings, which could cause wallets to connect to an unexpected server after update.

This commit fixes how Monero recipient addresses are shown in transaction history. Previously, saved descriptions could contain extra text (such as account names or labels) alongside the actual address, causing the app to display or copy a malformed address. The patch extracts only the valid Monero address portion when displaying it, reducing the chance a user accidentally copies or shares the wrong thing. It is a UI/data-sanitization fix rather than a cryptographic or network vulnerability.

This commit makes a tiny defensive change in the wallet's balance display code. It swaps two uses of elementAt(0) for elementAtOrNull(0), which prevents the app from crashing if the balance list is unexpectedly empty. There is no indication this fixes an exploitable security vulnerability; it appears to be a routine robustness fix for a user-interface crash.

This commit adds a new feature that lets users type human-friendly Zcash names (like 'alice.zec' or 'bob.zcash') instead of long wallet addresses. The app looks up the real address from a remote service called zcashnames.com. The change also includes a few small swap-screen fixes and a safety catch around another name lookup. There is no clear security bug in the diff, but any name-to-address lookup adds a small risk that a malicious or compromised server could redirect payments.

This commit is a routine German translation update. It fixes typos, corrects misspelled string keys (for example 'durres_PIN' to 'duress_PIN' and 'ignor' to 'ignore'), translates a few remaining English phrases into German, and tidies whitespace. There is no security-relevant change.

This commit updates a Lightning payment library (breez_sdk_spark_flutter) from version 0.11.0 to 0.14.0 and makes small matching code changes. It also fixes one app crash bug where the wallet tried to read a parsed address before checking whether an address had actually been parsed. The crash fix is a straightforward stability improvement; the library bump itself is a routine dependency update whose security implications are not described in the commit.

This commit is a trivial cleanup of a duplicate function signature that was accidentally introduced, likely by GitHub's web editor. It removes leftover duplicated lines and keeps the same retry logic. There is no security relevance.

This commit adds support for memos and destination tags when swapping to currencies that require them (like XRP, XLM, TON, EOS, HBAR). Previously, these currencies were excluded from swap receiving options. The change lets users enter a memo/destination tag, passes it to exchange providers that support it, filters out providers that don't support it, and stores it with the trade record. It also fixes a UI crash when selecting a receive currency that isn't a wallet type.

This commit is a routine visual update: it swaps the iOS and macOS app icons from many fixed-size PNG image files to a single scalable SVG icon format for each app variant. It also updates the build scripts and Xcode project files to use the new icon source. There is no change to wallet logic, security code, or user data handling.

This commit fixes how Cake Wallet's WalletConnect feature handles expired or disconnected sessions. Previously, the app's local list of sessions and authentication data could become out of sync with the actual WalletConnect state, potentially leaving stale connection data around or showing outdated session information. The patch clears and refreshes these lists more reliably when sessions end, expire, or pairings are deleted, and adds retry logic for network-related event emission.

This commit adds safety checks to prevent the Cake Wallet app from crashing when its Monero subaddress list is unexpectedly empty. It does not appear to fix a security vulnerability that an attacker could exploit; rather, it is a robustness improvement against a rare, observed production crash.

This commit adds a feature that lets users export their transaction history to a CSV file. The export includes details such as dates, amounts, transaction IDs, addresses, and notes. It is a normal data-export feature, not a code vulnerability. However, because the exported file can contain sensitive financial information, users should be careful where they save or share it. The commit also includes two small safety fixes: it checks whether a screen can be closed before trying to close it, and it clips the share-dialog position on iOS so it does not go off-screen.