Release notes
- Bundle BitBox02 firmware version v9.22.0
- Added BTC Direct buy option
- Fix long transaction notes to show fully on multiple lines when necessary
- Improve send-to-self transactions in account overview
- Use native scrollbars on macOS, iOS and Android
- Fix address signing fail on screen rotation for Pocket and Bitsurance
- Restrict selection to text files when importing notes
- Display the hide amount button by default and remove its settings
- Linux: add support for Wayland
- Fix the copy buttons in the Pocket order confirmation page
- Android: handle device disconnect while the app is in the background
- Improve send result view show relevant infos and options to make a new transaction or go back
- Added an option in advanced settings to allow the app to start in testnet at the next restart.
- Improve the UI of buy & sell page for mobile devices
- Fixed export to CSV for ERC20 tokens.
- Added support for xpub_required in AOPP.
- Create desktop shortcut by default on Windows during installation
- Migrate from deprecated Walletconnect web3wallet to Reown, add Sepolia, Arbitrum, Base, and Optimism to supported chains
- Upgraded to Qt 6.8.2, dropping support for macOS 11 and Ubuntu 20.04.
Verifying the release
Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:
curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import
Download the app for your platform and the corresponding .asc file and place them in the same folder.
We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.
To verify the signature, execute:
gpg --verify BitBox-4.47.0-macOS.dmg.asc
You should see the following output:
gpg --verify BitBox-4.47.0-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.47.0-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg: using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]
(The [ultimate] could say [unknown] or something else depending on your trust level.)