What the developer wrote
Authored by Ilya Artemov
Patch version bump
What changed, and why it matters
This commit is a routine version bump from 2.4.3 to 2.4.4. It only updates the version number in the Makefile and adds a changelog entry describing two newly allowed Bitcoin derivation paths. There are no code changes in the diff, so it does not introduce, fix, or alter any security-relevant behavior on its own.
No action needed for this commit alone. Review the actual implementation commits that changed derivation path handling if assessing the security of the 2.4.4 release.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies CHANGELOG.md and Makefile only. APPVERSION_P changes from 3 to 4. The changelog documents prior 2.4.3 work on derivation path hardening and notes that 2.4.4 adds two more allowed paths (Electrum and BIP-45 tree). No source code, policy logic, syscall usage, or cryptographic code is present in the commit.
Changed components
Makefile (version metadata)CHANGELOG.md (release notes)Inspect captured patch +10 / −2
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 46a9521..105a10b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
Dates are in `dd-mm-yyyy` format.
+## [2.4.4] - 15-12-2025
+
+### Changed
+
+- Derivation Path Hardening - 2 more allowed paths added:
+ - Electrum one
+ - BIP-45 tree
+
## [2.4.3] - 25-11-2025
### Changed
@@ -19,7 +27,7 @@ Dates are in `dd-mm-yyyy` format.
- Ticker moved to the right for swap operations, other minor UI updates
- Derivation Path Hardening:
- New master key fingerprint syscall use, `HAVE_APPLICATION_FLAG_DERIVE_MASTER` is removed
- - BIP-32 derivation paths is reinforced
+ - BIP-32 derivation paths is reinforced using wildcard syntax (`m/*/<COIN_TYPE>`)
## [2.4.2] - 08-09-2025
diff --git a/Makefile b/Makefile
index 655a8e7..381f3fc 100644
--- a/Makefile
+++ b/Makefile
@@ -28,7 +28,7 @@ PATH_SLIP21_APP_LOAD_PARAMS = "LEDGER-Wallet policy"
# Application version
APPVERSION_M = 2
APPVERSION_N = 4
-APPVERSION_P = 3
+APPVERSION_P = 4
APPVERSION_SUFFIX = # if not empty, appended at the end. Do not add a dash.
ifeq ($(APPVERSION_SUFFIX),)
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.