Cake Wallet / Monero.com

This commit fixes a UI mix-up in the Cake Wallet transaction filter. Previously, the 'Send' filter button was wired to incoming transactions and the 'Receive' button was wired to outgoing transactions, so tapping them would show the wrong list. The patch swaps the labels back to their correct transaction directions. It also fixes a related exchange/trade filter bug where the filter's on/off state was misreported, and makes sure toggling 'all' also updates the exchange filter items. There is no security vulnerability here—just a user-interface bug that could confuse users about which transactions are displayed.

This commit is a user-interface redesign of the transaction history screen in the Cake Wallet app. It changes how transaction lists are grouped by date, moves filter and export buttons into a new modal, and adds new UI components for selecting/deselecting filters. There is no indication of any security fix or vulnerability being addressed.

This commit fixes a UI bug in Cake Wallet's receive page. When the user had turned off automatic address generation, the manual 'rotate address' button could still be shown and pressed, but it would not actually update the displayed receiving address. The fix makes the button's visibility depend on whether rotation is truly available, shows a loading spinner while a new address is being created, and ensures the displayed address is updated after rotation even for non-Electrum wallets. There is no direct evidence of a security vulnerability such as funds being stolen; the issue is primarily a usability/consistency bug.

This commit is a cosmetic work-in-progress change to the transaction history screen. It adds a shorter version of the transaction list (showing only the first 3 non-date items) for use in a compact layout. There is no security-relevant behavior visible in the diff.

This commit adds safety checks before closing on-screen dialogs and showing confirmation messages. It prevents the app from crashing or behaving oddly if a screen is no longer active when a backup finishes saving or a Ledger hardware wallet reconnects. There is no indication this is a security fix, and it does not appear exploitable by an attacker.

This commit is mostly a routine translation and localization update across many languages, plus a small code change that retries deleting a wallet directory a few times if the first attempt fails. There is no clear security vulnerability being fixed. The retry logic is a minor reliability improvement, not a security fix.

This commit is a routine user-interface layout fix. It changes how the wallet-type list scrolls and adjusts padding on the 'New Wallet Type' screen so the page displays correctly. There is no security-relevant change.

This commit removes file paths from error messages shown to users when Monero transactions fail. The change prevents error messages from leaking internal source-code locations (like which C++ file and line number caused the error), which could help attackers learn about the app's internal structure. It also applies the same cleanup to more transaction error paths than before.

This commit changes how Cake Wallet builds and reads QR-code payment links for Solana and Tron tokens, and fixes a bug where EVM token QR codes did not include the token identifier. It also refactors how the app looks up a token from its contract/mint address. The changes are feature additions and a bug fix; there is no direct evidence in the diff of a security vulnerability, but any change to payment URI parsing and token lookup can affect whether a user sends funds to the wrong token or wrong address.

This commit fixes a display bug in Cake Wallet's Solana transaction history. Previously, the app added '_incoming' or '_outgoing' tags to the end of real Solana transaction IDs. This caused blockchain explorer links and copied transaction IDs to be invalid because those extra tags are not part of the real transaction hash. The fix strips those tags before showing or sharing the transaction ID. There is no direct evidence this was a security vulnerability, but it could confuse users or make it harder to verify payments on a blockchain explorer.

This commit only adds German translations for new user-interface labels in the Cake Wallet app. There are no code changes, no security fixes, and no behavior changes. It is a routine localization update.

This commit is a bug-fix patch for Cake Wallet that addresses a problem where creating or restoring EVM (Ethereum-compatible) wallets would hang or fail after a backup restore. The changes add timeouts to WalletConnect initialization calls and move the WalletConnect setup off the main path so that if it fails, it does not block the wallet from being created or opened. There is no direct evidence in the commit of a security vulnerability being exploited; it appears to be a reliability fix that may reduce the risk of denial-of-service style hangs.

This commit is a routine UI polish update for an upcoming release. It adds small badge icons next to token logos in swap confirmation screens, fixes a missing icon for MWEB (Litecoin's privacy feature), corrects the decimal display for one Solana token, and swaps a plain image widget for a reusable token-image widget in a wallet selector. There is no change to security-sensitive code such as cryptography, key handling, transaction signing, network calls, or permissions.

This commit removes some old, disabled code paths for handling Lightning Network and OpenCryptoPay QR code scans. The removed logic is commented out with 'false &&' guards, so it was already inactive. The practical effect is that scanning certain QR codes will now fall through to the remaining handler (WalletConnect 'wc:' scheme) instead of being processed by the old Lightning-specific logic. There is no clear security fix here; it appears to be cleanup of dead code.

This commit is a routine version-bump release candidate for Cake Wallet v6.2.0. It updates translated changelog text, bumps version and build numbers for Android/iOS/macOS, refreshes iOS CocoaPods plugin checksums and identifiers, changes one Bitcoin example address used in a NEAR exchange provider, and updates a page title string. There is no security-relevant code change visible in the diff.

This commit is a routine user-interface layout fix. It wraps a currency picker in a SafeArea so content isn't hidden by device notches or system bars, removes an extra 24-pixel gap below search boxes, and sets the QR code display to 70% of screen width instead of letting it size automatically. There is no security-relevant change.

This commit adds new UI options to the transaction confirmation screen, letting users save a recipient as a contact or add a note right after sending. It also changes how pending transactions are tracked for EVM, Solana, and Tron so they appear immediately in history instead of waiting for the next sync. There is no clear security fix or vulnerability being patched; it reads as a feature/UI improvement. Some of the new code introduces minor quality concerns (e.g., a likely copy-paste bug in Tron fee handling, FIXME comments about decimal parsing, and a broad removal of analysis exclusions), but nothing in the diff itself demonstrates an exploitable security flaw.

This commit is a user-interface redesign of the QR code scanner in Cake Wallet. It replaces a placeholder screen with a full camera scanning page, adds manual text entry, a help sheet, and progress indicators for animated UR QR codes. There is no clear security fix or vulnerability being patched; it is primarily a feature and UX improvement.

This commit is a user-interface polish change. It introduces a new reusable widget for displaying cryptocurrency token icons with circular clipping and automatic background detection, and replaces older image widgets across many screens. There is no security-relevant behavior change.

This commit only updates German translations for a handful of WalletConnect-related user-interface labels. There are no code, logic, or security changes.

This commit is a routine user-interface polish change. It splits wallet names into separate 'name' and 'ticker' fields (e.g., 'Monero' and 'XMR' instead of 'Monero (XMR)'), adds a small layout padding tweak, and lets users long-press a transaction amount to copy it. There is nothing in the code that affects security, funds, cryptography, or private data.

This commit simply adds a new decorative wallet illustration as an SVG image file. It is a static picture used in the app's user interface and does not change any code, security logic, or data handling.

This commit only updates the pinned version (commit reference) of an internal dependency called trezor-flutter used by the Monero wallet package. There is no information in the commit or supplied references about what changed in that dependency, why it was updated, or whether it fixes any security issue. By itself, this diff is a routine dependency bump with no visible security relevance.

This commit is a routine user-interface cleanup. It swaps an old icon file for a newer one, changes how a couple of wallet-selection images are loaded, makes a device-tap area respond to taps more reliably, and tweaks text color. There is nothing in the changes that affects passwords, keys, funds, or network security.

This commit redesigns the node list user interface and adds a way to scan or share node connection details via QR code. The most notable security-relevant change is that node connectivity checks now route through a 'ProxyWrapper' helper with a flag that allows bypassing SSL certificate validation for Monero nodes. That bypass could make it easier for an attacker on the same network to impersonate a node and intercept traffic. The commit also introduces a new constructor that parses node URIs, including username and password, from scanned QR codes or links.