Stack Wallet

This commit is a small UI fix for the Stack Wallet app. It changes when the 'Clear electrumx cache' button is shown for Spark (Firo) wallets so that it also appears for certain 'view-only' wallets. The change mostly reorganizes on-screen settings and updates a few warning messages. There is no direct evidence in the commit of a security vulnerability being fixed.

This commit raises the per-transaction cap on sending Firo from a Spark (privacy) address to a regular transparent address from 10,000 Firo to 50,000 Firo. It is a configuration/limit change, not a code flaw. There is no indication it fixes a vulnerability; it simply aligns the wallet with a higher protocol-level limit.

This commit simplifies how the wallet decides whether a Solana token uses the older SPL token standard or the newer Token-2022 standard. It replaces a precise check of the exact program address with a looser check: anything whose owner address starts with 'Token' is treated as Token-2022. It also removes an unused helper function for finding token metadata addresses and strips out some debug print statements. The change is described by the developer as a 'cleanup' with a low-priority TODO to improve the detection later.

This commit updates a dependency called flutter_mwebd from version 0.0.1-pre.10 to 0.0.1-pre.11 and adds one debug log line when preparing a Mimblewimble (MWEB) cryptocurrency transaction. There is no description of why the dependency was updated or what changed in the new version. The added log line prints transaction preparation data, which could include sensitive details, but the commit itself does not show a fix for a clear security vulnerability.

This commit increases the maximum allowed transaction size/weight for Spark mint transactions in the Stack Wallet app from 400,000 weight units to 1,000,000 weight units (effectively raising the size cap from roughly 100 KB to 250 KB). It is a configuration change that aligns the wallet with a recent Firo protocol update. There is no direct evidence in the commit that this fixes an exploitable vulnerability; it appears to be a compatibility/functional update to allow larger valid Spark mint transactions.

This commit is a routine cleanup of Solana token wallet code. It removes debug print statements, trims verbose logging, and deletes lengthy documentation comments. There are no functional changes to how the wallet handles money, keys, or network calls, and no security bug is introduced or fixed.

This commit adds support for Solana Token-2022 transfers in Stack Wallet. It changes how the wallet detects which token program a token uses, validates sender and recipient token accounts before sending, and switches from a simple transfer instruction to a 'transferChecked' instruction that includes the token's mint and decimal count. The commit also replaces a placeholder address-derivation method with a real Solana Associated Token Account (ATA) derivation. The changes are mostly defensive, but they introduce new logic that relies on RPC responses and string matching on program IDs, which could be a source of bugs or security issues if not fully correct.

This commit adds a single image file—a splash screen graphic for 'Stack Duo'—and changes no executable code. There is nothing here that affects security.

This commit updates the Mimblewimble (Mweb) wallet code in Stack Wallet. It adds a one-time scan of older transactions when restoring a wallet, fixes a bug where spent Mweb coins were not always marked as used, and changes how transaction fees are calculated. The fee-calculation change removes a previous workaround that added an extra 1 satoshi to every fee, which could have caused users to slightly overpay. There is no clear security vulnerability in the diff, but the changes touch sensitive wallet logic (secret scanning, UTXO state, and fee math), so bugs here could affect funds or privacy.

This commit fixes a bug in Stack Wallet's Solana token wallet support. When a user chose to sync only selected wallets and skipped opening the main Solana wallet, the token wallet would not initialize its connection to the Solana network (RPC client). The fix makes the token wallet explicitly initialize that connection during its own startup, so token balances and transactions can work even when the parent wallet was not opened first.

A one-line change in the Solana token wallet code now asks the main Solana wallet to refresh the blockchain height instead of doing nothing. Previously, the token wallet's chain-height update was left as an unfinished 'to-do' task, which could have caused stale or missing chain-height information for token accounts. There is no direct evidence this was a security vulnerability, but relying on a placeholder no-op for chain-height updates is a reliability weakness.

This commit is a minor user-interface tweak for the Stack Wallet mobile app. After a user creates or restores a Solana wallet, the app now automatically shows the token-management screen, just as it already did for Ethereum wallets. There is no security issue here—only a small convenience improvement.

This commit fixes two mobile UI/behavior bugs in the Solana token send flow. First, it delays setting the default fee speed until after the screen is built, preventing a possible crash or inconsistent state. Second, it corrects which wallet object is used to estimate fees for non-Ethereum tokens (like Solana tokens), so fee estimates come from the right wallet instead of the currently selected Ethereum token wallet. The commit does not describe these as security issues, but using the wrong wallet for fee estimates could in theory lead to incorrect fees being shown or used.

This commit adds a user-facing fee selection feature for Solana and Solana token (SPL) sends in Stack Wallet. It replaces a hardcoded placeholder fee with live fee estimates based on network conditions, offering slow/average/fast tiers. There is no direct evidence this fixes a security vulnerability; it is a feature/UX improvement.

This commit fixes how the mobile app navigates to Solana token wallets. Previously, tapping a Solana token card may have opened the wrong wallet view or skipped the token-specific screen. The change makes sure Solana tokens open their dedicated token view and that the wallets overview is shown when a Solana wallet has tokens. There is no indication this is a security fix; it appears to be a user-interface/navigation bug fix.

This commit adds desktop user-interface support for Solana SPL tokens in Stack Wallet. It lets users view and navigate to Solana token wallets the same way they already could for Ethereum tokens. The changes are almost entirely UI wiring and data-model generalization; there is no obvious security vulnerability in the diff, but the code does add new database lookups and token-loading paths that could later harbor bugs if the underlying token data is malformed or untrusted.

This commit is a user-interface change for the desktop version of Stack Wallet. It makes the token name/header area on two desktop token detail pages respond to taps/clicks by opening a contract details screen. There is no indication this fixes or introduces a security problem.

This commit adds a single new image file, a splash screen graphic for 'Stack Duo'. There is no code change and no apparent security relevance.

This commit adds a single Dart getter that sets the Isar database transaction version to 2 for Solana token wallets. There is no visible security-relevant change in behavior, no bug fix, and no change to how funds, keys, or transactions are handled. It appears to be a schema or versioning update.

This commit is a code-quality refactor for Solana token handling in the Stack Wallet app. It replaces loose 'dynamic' types with concrete SplToken/EthContract types, removes unsafe casts, and makes the Solana token wallet constructor carry a full token object instead of separate fields. There is no direct evidence of a security vulnerability being fixed, but the changes remove patterns (dynamic casts and type confusion between Ethereum and Solana tokens) that can lead to crashes or incorrect balance/price display.

This commit tidies up how token icons are displayed in the Stack Wallet app. It switches Ethereum and Solana fallback icons from app-asset files to local files, adds a loading spinner while network icons load, and replaces a silent error with a logged error. There is no obvious security vulnerability here; it is primarily a UI cleanup.

This commit is routine housekeeping: it regenerates automatically generated Dart files (for database models and test mocks), updates a .gitignore rule, and tweaks a coin icon provider. There are no user-facing security fixes or obviously dangerous code changes in the diff itself.

A single debug logging line that printed pending transaction data has been removed. There is no indication this was a security vulnerability—it appears to be a routine cleanup of leftover debug output.

This commit refines how the Stack Wallet mobile app handles Solana (SPL) custom tokens. It separates default tokens from user-added custom tokens, passes the wallet ID when adding a custom token, and adds unique keys to token list items. There is no clear security vulnerability in the diff itself; it appears to be a feature/bug-fix improvement for token management.

This commit adds a new screen that lets users manually add custom Solana SPL tokens to their Stack Wallet. It checks the mint address format, tries to fetch token details from an API, and lets the user type in details if the API has no record. The change also replaces the old fixed list of Solana tokens with this custom-add flow. There is no clear security bug in the diff, but the new code trusts user-supplied token metadata and does not verify on-chain that the token really exists or that the wallet holds it, which could let a user be tricked into adding a fake or misleading token.