What's Changed
Envoy 2.3.4 focuses on reliability. Passport Prime firmware updates now resume after an interruption rather than starting again, Tor connections recover more cleanly, and Magic Backup stores and removes wallet data more precisely on iOS and Android. Android releases are also now reproducible, so anyone can rebuild Envoy from source and confirm it matches the APK we publish.
New Features
- Envoy Android releases are now reproducible. With pinned Nix dependencies, anyone can independently rebuild Envoy from source and verify that their local build byte-for-byte matches the APK we publish on GitHub and the Play Store.
Improvements
-
Passport Prime firmware updates now resume instead of restarting. Envoy streams firmware patches with transport-level resume support, so a slow connection that stalls no longer discards the transfer and starts from zero. Envoy also acknowledges firmware fetches to Passport Prime before preparing the patch, so the device's transfer watchdog no longer times out during preparation.
-
Passport Prime onboarding is now more forgiving on slow networks. Connectivity checks give Tor enough time to complete a cold bootstrap before reporting disconnection, so onboarding no longer fails while Tor is still coming online.
-
Tor connectivity is more resilient. Envoy recovers from Tor startup failures, prevents automatic Tor recovery from becoming permanently wedged, and uses a single consistent TLS validation policy for personal Electrum nodes reached over onion addresses.
-
Improved how Magic Backup stores and removes wallet data on iOS and Android.
-
Learn video downloads now surface errors properly instead of leaving the Learn UI waiting forever when a download stalls, errors, or is cancelled.
Bug Fixes
-
Fixed a bug where a timed-out Bluetooth write during a Passport Prime firmware update could permanently wedge all subsequent communication with Passport Prime, including heartbeats and exchange rates, until Envoy was restarted.
-
Fixed a bug where a failed Passport Prime update check could cause the next successful check to display the stale error, blocking users from installing an available update.
-
Fixed a bug where manual and periodic wallet syncs could overlap and duplicate work.
-
Fixed a bug where a single Electrum sync round with several concurrent descriptor failures could falsely turn the Tor shield red even when Tor itself was healthy.