What changed, and why it matters
This commit changes the default Epic Cash node used by Stack Wallet from an unencrypted HTTP connection to an encrypted HTTPS connection, and switches the domain from epiccash.stackwallet.com to epic.stackwallet.com. The main security improvement is that wallet traffic to the default node is now protected from eavesdropping and tampering on the network. There is no direct evidence in the commit of an active attack or vulnerability disclosure.
Users relying on the default Epic Cash node should ensure they are on a version containing this commit so node traffic is encrypted. Operators of custom nodes should verify their own TLS configuration. No immediate incident response is indicated by the diff alone.
Security signals we found
Default node communication switched from HTTP to HTTPS
useSSL flag changed from false to true
Default node hostname changed
Transport-layer hardening for wallet-to-node traffic
Evidence from the diff
The patch updates the default Epic Cash (EPIC) node configuration in lib/wallets/crypto_currency/coins/epiccash.dart. It changes the host from http://epiccash.stackwallet.com to https://epic.stackwallet.com and sets useSSL from false to true, while keeping port 3413. This is a transport-layer hardening change: it removes cleartext HTTP for default node communication and enables TLS. The diff does not contain any logic changes, authentication changes, or incident details.
Changed components
lib/wallets/crypto_currency/coins/epiccash.dartEpic Cash default node configurationStack Wallet Epic Cash wallet transportInspect captured patch +2 / −2
diff --git a/lib/wallets/crypto_currency/coins/epiccash.dart b/lib/wallets/crypto_currency/coins/epiccash.dart
index e60f90f..84fb1b4 100644
--- a/lib/wallets/crypto_currency/coins/epiccash.dart
+++ b/lib/wallets/crypto_currency/coins/epiccash.dart
@@ -70,11 +70,11 @@ class Epiccash extends Bip39Currency {
switch (network) {
case CryptoCurrencyNetwork.main:
return NodeModel(
- host: "http://epiccash.stackwallet.com",
+ host: "https://epic.stackwallet.com",
port: 3413,
name: DefaultNodes.defaultName,
id: DefaultNodes.buildId(this),
- useSSL: false,
+ useSSL: true,
enabled: true,
coinName: identifier,
isFailover: true,
Why this scored 39/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.