v13.2.0 Highlights:
- LDK: support for 24-word seed phrases
- Embedded LND v0.21.2-beta
- Cashu CDK upgrade (Minibits compatibility)
- Security hardening
- Bug fixes
What's Changed
- chore(deps): bump js-yaml from 3.14.2 to 3.15.0 in /zeus_modules/@lightninglabs/lnc-core by @dependabot[bot] in #4206
- deps: patch ws, js-yaml, and markdown-it security alerts by @kaloudis in #4214
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4219
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4220
- docs: add Claude Code skill library under .claude/skills by @kaloudis in #4209
- fix: poll status for free LSPS1/LSPS7 orders by @shubhamkmr04 in #4204
- fix: display units for invoice expiry and CLTV expiry by @kaloudis in #4225
- SwipeButton: lock knob in place after successful swipe by @kaloudis in #4224
- fix: use TextInput suffix for fee limit percent fields by @ajaysehwal in #4228
- backends: fix amountless invoice creation for LDK Node by @ajaysehwal in #4232
- chore(deps): bump protobufjs from 7.6.3 to 7.6.5 by @dependabot[bot] in #4235
- chore(deps): bump brace-expansion from 1.1.11 to 1.1.16 in /zeus_modules/@lightninglabs/lnc-core by @dependabot[bot] in #4234
- chore(deps): bump brace-expansion from 5.0.6 to 5.0.7 in /zeus_modules/@lightninglabs/lnc-rn by @dependabot[bot] in #4236
- [feat] LND v0.21-beta by @kaloudis in #4177
- Receive: surface Flow LSP proposal rejection as dismissable warning by @kaloudis in #4233
- chore(deps): bump shell-quote from 1.8.4 to 1.10.0 in /zeus_modules/@lightninglabs/lnc-rn by @dependabot[bot] in #4237
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4238
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4240
- fix: deep links handled twice with 'Select wallet on start-up' by @kaloudis in #4226
- stores: prevent stale closeChannel error from wiping channel list by @kaloudis in #4230
- chore(deps): bump fast-uri from 3.1.2 to 3.1.4 in /zeus_modules/@lightninglabs/lnc-core by @dependabot[bot] in #4241
- chore(deps): bump svgo from 3.3.3 to 3.3.4 by @dependabot[bot] in #4242
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4243
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4244
- ci: add Dependabot config for npm and GitHub Actions version updates by @kaloudis in #4215
- chore(deps): bump @babel/preset-env from 7.22.15 to 7.29.7 by @dependabot[bot] in #4256
- chore(deps): bump mobx from 5.15.3 to 5.15.7 by @dependabot[bot] in #4253
- ci: bump actions/setup-node from 6 to 7 by @dependabot[bot] in #4245
- ci: bump actions/checkout from 6 to 7 by @dependabot[bot] in #4246
- fix: prevent Security settings UI flash on open by @ajaysehwal in #4239
- chore(deps): bump events from 1.1.1 to 3.3.0 by @dependabot[bot] in #4248
- chore(deps): bump concurrently from 9.1.2 to 10.0.3 by @dependabot[bot] in #4251
- chore(deps): bump protobufjs-cli from 1.3.3 to 2.0.0 by @dependabot[bot] in #4252
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4259
- chore(deps): bump 47 minor and patch dependencies (slimmed #4247) by @kaloudis in #4260
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4263
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4264
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4265
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4266
- chore(deps): bump json from 2.19.2 to 2.19.9 by @dependabot[bot] in #4267
- chore(deps): bump valibot from 1.2.0 to 1.4.2 by @dependabot[bot] in #4268
- chore(deps): migrate lnc-rn from deprecated tslint to eslint v9 by @kaloudis in #4271
- chore(deps): clear Dependabot alerts on transitive dependencies by @kaloudis in #4274
- chore(deps): bump protobufjs to v8 + protobufjs-cli 2.5.1, regenerate bindings by @kaloudis in #4262
- build: fix vendored lnc-rn bob build + add mocha test suite by @kaloudis in #4275
- LDK: Add support for 24 word seed phrases by @shubhamkmr04 in #4212
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4282
- [feat] fix(LNC): route register callbacks through events to avoid new-arch crash by @kaloudis in #4205
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4283
- build: run prettier on generated proto types after gen-proto by @kaloudis in #4284
- deps: fix shell-quote DoS, clean up minimatch pins by @kaloudis in #4281
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4290
- fix(CLN): include unpaid invoices in Activity by @ajaysehwal in #4291
- fix: show the correct seed when backing up an inactive wallet by @ajaysehwal in #4280
- Lockscreen: prevent duress wipe in security management flows by @kaloudis in #4293
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4295
- views: WalletConfiguration: lock interface for initialized LDK Node by @kaloudis in #4296
- chore(deps): bump @react-native-documents/picker from 11.0.3 to 12.0.2 by @dependabot[bot] in #4249
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4299
- fix(nwc): fix lookup_invoice, list_transactions, and backend invoice lookup by @ajaysehwal in #4294
- docs: add SECURITY.md with vulnerability disclosure policy by @kaloudis in #4310
- fix(CLN/LND): poll lookupInvoice in the Receive payment watcher by @kaloudis in #4300
- utils: disable REST proxy in embedded LND config by @kaloudis in #4311
- fix(swaps): always generate an independent swap rescue key by @kaloudis in #4314
- build: verify sha256 of FFI bindings and harden fetch-libraries.sh by @kaloudis in #4316
- fix(vss): fail restore loudly when VSS is unreachable instead of building an empty wallet by @kaloudis in #4292
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4318
- fix(nwc): serialize pay_invoice handling to prevent shared-store races by @kaloudis in #4303
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4320
- fix: guard against payment double-submission in send path by @kaloudis in #4301
- fix(nwc): count pending payments against connection spending budget by @kaloudis in #4305
- Receive: surface real LSP Flow errors, don't fall back to unwrapped invoice by @kaloudis in #4319
- fix(donations): verify LNURL invoice before silent donation payment by @kaloudis in #4322
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4330
- fix(receive): use plain decimal amounts in BIP21 URIs by @kaloudis in #4324
- fix(swaps): enforce BIP39 checksum on rescue key restore by @kaloudis in #4321
- chore(deps): bump socket.io-parser from 4.2.6 to 4.2.7 by @dependabot[bot] in #4333
- chore(deps): bump fast-uri from 3.1.4 to 3.1.5 in /zeus_modules/@lightninglabs/lnc-core by @dependabot[bot] in #4332
- fix(nwc): debit budget on settled payments missing from the payments list by @kaloudis in #4334
- fix(nwc): await signature so sign_message returns the right one by @kaloudis in #4308
- fix: PeerItem: render stats with KeyValue to avoid Text crash by @ajaysehwal in #4315
- fix(security): fully wipe wallet data on duress and lockout by @kaloudis in #4327
- ui: LnurlPay: start amount empty instead of min sendable by @kaloudis in #4337
- fix(lnc): pin Metro to app react-native over nested zeus_modules copy by @ajaysehwal in #4339
- ui: Themes: distinguish placeholders from input text by @kaloudis in #4338
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4342
- fix(nwc): rotate and persist client secret on relay change by @ajaysehwal in #4341
- fix(nwc): include routing and melt fees in connection budget by @ajaysehwal in #4340
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4346
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4348
- views: Lightning Address: push device token when notifications enabled by @kaloudis in #4349
- fix: stop logging sensitive payment and credential material by @kaloudis in #4336
- chore(deps): bump js-yaml from 3.15.0 to 3.15.1 in /zeus_modules/@lightninglabs/lnc-core by @dependabot[bot] in #4357
- chore(deps): bump nanoid from 3.3.11 to 3.3.18 by @dependabot[bot] in #4359
- fix(nwc): safe pay_invoice activity upsert and reconcile persistence by @ajaysehwal in #4343
- chore(deps): bump js-yaml and brace-expansion to patched versions by @kaloudis in #4386
- fix: never touch the network during a clipboard probe by @kaloudis in #4371
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4391
- fix(nwc): enforce connection expiry on all subscribed methods by @ajaysehwal in #4360
- fix: migrate CLN payments from deprecated pay/keysend to xpay/xkeysend by @kaloudis in #4390
- fix(nwc): scope list_transactions and lookup_invoice to connection activity by @ajaysehwal in #4392
- fix: Contacts: clear stale prefillContact on every AddContact exit by @kaloudis in #4405
- ui: disable pay on zero balance, grey out disabled button icons by @kaloudis in #4404
- Embedded LND: v0.21.2-beta-zeus by @kaloudis in #4401
- fix: release fetchLock on every fetchData exit (stale balance until reconnect) by @kaloudis in #4398
- Block payment of expired lightning invoices by @kaloudis in #4368
- fix: enforce DNSSEC validation on BIP 353 BOLT 12 address resolution by @kaloudis in #4361
- ui: NeutrinoPeers: move loading indicator into header by @kaloudis in #4408
- fix(nwc): rate-limit make_invoice requests per connection by @ajaysehwal in #4393
- config: new default LSP hosts: zeuslsp.com by @kaloudis in #4356
- [Transifex] Updates for project ZEUS by @transifex-integration[bot] in #4412
- Swaps: retire ZEUS swap server, default to Boltz, fetch rates only in Swaps view by @kaloudis in #4399
- fix(ldk): real UTXO confirmations in coin control, anchor reserve no longer shown as pending by @kaloudis in #4395
- deps: Bump Cashu Dev Kit to 0.17.3: fix ecash operations against cdk-mintd 0.17 mints (Minibits) by @kaloudis in #4397
Full Changelog: v13.1.2...v13.2.0-alpha1
Verifying the Release
In order to verify the release, you'll need to have gpg or gpg2 installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys that have signed this release if you haven't done so already:
gpg --keyserver hkps://keys.openpgp.org --recv-keys 96C225207F2137E278C31CF7AAC48DE8AB8DEE84
Once you have his PGP key you can verify the release (assuming manifest-v13.2.0-alpha1.txt and manifest-v13.2.0-alpha1.txt.sig are in the current directory) with:
gpg --verify manifest-v13.2.0-alpha1.txt.sig manifest-v13.2.0-alpha1.txt
You should see the following if the verification was successful:
gpg: Signature made Thu Aug 13 19:49:22 2026 EDT
gpg: using RSA key 96C225207F2137E278C31CF7AAC48DE8AB8DEE84
gpg: issuer "zeusln@tutanota.com"
gpg: Good signature from "Zeus LN <zeusln@tutanota.com>"
gpg: aka "ZEUS Support <support@zeusln.com>"
That will verify the signature on the main manifest page which ensures integrity and authenticity of the binaries you've downloaded locally. Next, depending on your operating system you should then re-calculate the sha256 sum of the binary, and compare that with the following hashes:
cat manifest-v13.2.0-alpha1.txt
One can use the shasum -a 256 <file name here> tool in order to re-compute the sha256 hash of the target binary for your operating system. The produced hash should be compared with the hashes listed above and they should match exactly.
Android fingerprint
Users verifying the release on an Android device can check against the key fingerprint below using AppVerifier. This fingerprint can also be found on our website here.
SHA1: 32:06:3C:97:96:38:0D:99:EE:4A:CB:B8:1E:2A:6F:27:FD:66:8E:C1
SHA256: 2A:F8:E2:0A:C9:44:57:67:CB:D4:4E:D8:4D:BB:FC:33:C6:C9:82:48:89:7C:4F:84:3C:42:C2:76:5C:4A:D3:BA
Signature algorithm name: SHA256withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3