Cake Wallet / Monero.com

This commit makes three small code changes: two places now silently ignore Lightning/Bitcoin network timeout errors in addition to DNS errors, and one Flutter UI check was simplified from 'context.mounted' to 'mounted'. The SVG asset change is unrelated binary data. The main concern is that hiding timeout errors could mask network or service problems, but there is no direct evidence this creates a security vulnerability.

This commit simply adds a rule to the project's .gitignore file so that generated .svg.vec files in the assets/new-ui directory are not tracked by Git. There is no code change, no security fix, and no indication of a vulnerability.

This commit adds a safety check to prevent the app from using a Lightning wallet before it has finished initializing. Previously, the app only checked whether a Lightning wallet existed, not whether it was ready. This could have caused crashes or incorrect balance/update behavior if the app tried to use the wallet while it was still starting up.

This commit adds the ability to press the Enter/Return key to submit a wallet unlock password on desktop, instead of only being able to tap the unlock button. It also cleans up the unlock logic into one shared method and properly disposes of the password text controller. There is no security vulnerability here; it is a normal user-experience improvement.

This commit simply adds one line to a setup script so that a graphics-compilation step runs automatically when configuring the Cake Wallet app. There is no indication of a security fix, vulnerability, or behavior change that affects users or their funds.

This commit lets users scan a WalletConnect QR code from the main scan button. It adds a check that the current wallet supports EVM-compatible chains before allowing the connection, and routes the scanned 'wc:' URI into the existing WalletConnect pairing flow. It also bumps a Lightning SDK dependency version in the iOS lockfile. There is no obvious security fix or vulnerability being patched; it reads like a feature/UX improvement.

This commit simply adds one line to a setup script so that it runs a graphics compilation step during the normal build configuration process. There is no security-relevant change visible in the diff.

This commit changes how Cake Wallet derives Bitcoin-style addresses from a user's recovery seed. Previously, the app used a single derivation scheme for all address types. Now it uses the standard BIP44/49/84/86 paths per address type (legacy, SegWit, Taproot, etc.) while keeping an older 'legacy' path for compatibility with existing wallets. The change is a feature/fix for correctness and interoperability, not an obvious security vulnerability. However, any change to key derivation is sensitive because mistakes can make funds inaccessible or cause users to share/scan the wrong addresses.

This commit is a user-interface enhancement, not a security fix. It adds a small on-screen hint that appears when a user has chosen to hide their wallet balance, reminding them that they can long-press the balance card to reveal it. The hint stops showing after the user has hidden the balance ten times. There is no vulnerability or security-relevant change here.

This commit simply changes a transaction details popup to open nearly full-screen by default instead of opening at 60% of the screen height. It is a user-interface tweak with no security relevance.

This commit fixes an off-by-one error in a Litecoin wallet feature that ensures enough MWEB (privacy) addresses exist up to a requested index. The fix adds 1 to the requested index before generating addresses. Without the fix, the wallet might create one fewer MWEB address than needed, which could cause address lookup or balance detection issues for privacy transactions. There is no direct evidence in the commit of a security vulnerability or exploit.

This commit is a routine dependency update for the Monero-related libraries used by Cake Wallet. It reverts an earlier revert, bumps the 'monero_c' code to a newer commit, changes how prebuilt native library files are named and organized, and fixes macOS build scripts. There is no direct evidence in the commit message or diff that this fixes a known security vulnerability; it appears to be a build/dependency maintenance change.

This commit is a routine bug-fix and feature update for Cake Wallet's Bitcoin and Lightning support. It improves how the app handles network errors when checking Lightning usernames, fixes 'send all' behavior for Lightning payments, normalizes amount inputs that use commas instead of dots, and adds event handling for deposit transactions. There is no clear security vulnerability being fixed; the changes mostly improve robustness and user experience.

This commit removes the Mimblewimble Extension Blocks (MWEB) privacy feature from the Litecoin wallet on desktop platforms (Windows, macOS, Linux). It keeps MWEB available only on Android and iOS. The change is a feature gating / platform restriction, not a fix for an active security vulnerability in the code itself.

This commit makes two small hardening changes in a cryptocurrency wallet app. It switches log writes to a synchronous (blocking) mode, which helps avoid file corruption if multiple log lines arrive quickly. It also replaces a strict number parser with a safer one that falls back to zero when the amount text is invalid, preventing the app from crashing if a user enters a non-numeric value in a fiat conversion field.

This commit is a user-interface redesign for the transaction details screen in the Cake Wallet cryptocurrency app. It replaces the old full-page transaction details with a new bottom-sheet modal, adds a copy-to-clipboard option for each detail row, and refactors how transaction detail rows are generated. There is no obvious security vulnerability in the changes, but the refactor is large and touches many wallet types, so small functional regressions are possible.

This commit fixes how the Cake Wallet app updates and displays transaction statuses. It prevents duplicate transactions from appearing in the history list, ensures pending/completed transactions are correctly distinguished, and fixes a small UI issue on the receive screen when automatic address rotation is turned off. There is no direct evidence this is a security vulnerability, but stale or incorrect transaction status could mislead users about whether a payment was confirmed.

This is a tiny one-line fix in a Dart file that maps a cryptocurrency ticker (ARB) to the correct wallet type (Arbitrum). Before the fix, selecting or handling the ARB asset may have failed because only a related ticker (arbEth) was recognized. There is no direct security exploit here; it is a functional bug fix that could only indirectly affect user funds by causing wrong wallet behavior or failed transactions.

This commit fixes a UI bug in Cake Wallet's receive screen. Previously, after generating a Lightning Network invoice, the app could keep showing that Lightning invoice even when the user switched to a different receive option (like a regular Bitcoin address). The fix makes the app check the wallet's actual current payment type instead of relying on a cached value.

This commit reverts a previous dependency update for the Monero-related libraries used by Cake Wallet. It downgrades the bundled 'monero_c' code and prebuilt binaries from a newer release (v0.18.4.6-RC1) back to an older one (v0.18.4.0-RC9), and changes how those native library files are organized and named. The commit itself does not contain a clear security fix or vulnerability disclosure; it looks like a build/dependency rollback, possibly because the newer version caused build or runtime problems.

This commit updates the Monero-related wallet libraries (monero_c) used by Cake Wallet from an older release candidate (v0.18.4.0-RC9) to a newer one (v0.18.4.6-RC1). It also reorganizes how the compiled native libraries are stored and named across Android, iOS, Linux, and macOS. The change is a routine dependency upgrade and build-system refactor. There is no direct evidence in the commit that this fixes a specific security vulnerability, but updating cryptographic/wallet libraries is generally a good security practice because newer versions often include bug fixes.

This commit adds one line to make sure a newly created wallet is saved to disk right after its metadata record is saved. Without this save, the app might continue using or switching to a wallet whose underlying files were not yet persisted, which could lead to crashes, missing wallet data, or a user being unable to reopen the wallet later. It is a data-consistency fix rather than an obvious remote attack vector.

This commit contains two small user-interface fixes: it adjusts the spacing inside a filter button and fixes a bug where an error popup on the sign/verify screen might not close correctly. There is no indication these changes address a security problem.

This commit is a routine user-interface performance improvement. It replaces several nested scrolling lists with Flutter's more efficient 'sliver' scrolling widgets, adds a small delay to a transaction-update callback, and updates a lightning-bolt icon asset. There is no indication it fixes a security vulnerability or introduces a security-relevant change.

This commit is a large user-interface redesign of the settings screens in the Cake Wallet mobile app. It replaces old settings widgets with newer components, reorganizes settings into new categories, adds new view models, and updates icons and navigation. There is no clear security vulnerability in the diff itself; it is primarily a cosmetic and structural refactor.