Release notes v2.1.15

This important security update adds a sandbox to isolate the tor process.
It includes also the latest Tor security release and Java security updates.
Updating to this version is required to continue trading.

Bundled and Sandboxed Tor

• Bisq now runs its bundled Tor on Linux as well as macOS and Windows. Its own Tor runs in a sandbox by default. The desktop explains when the system can provide only a weaker sandbox level.
• Built-in or custom bridges can be configured in bisq.conf, with bundled pluggable transport programs. The desktop adds a switch to permit those programs inside the sandbox. Bisq also supports external Tor, including Whonix, with stronger control-port authentication and a SOCKS isolation check.
• Linux no longer needs the distribution's Tor package for Bisq.
• Pluggable transports in the sandbox need explicit permission; Windows requires the sandbox off to use them.
• Torrc overrides in bisq.conf that make Tor run code stop the Tor start; set them as JVM options instead.
• Backups can include external Tor credentials, so review them before sharing.
• A bridge that cannot run stops Tor startup instead of connecting directly. Seed nodes, oracle nodes and the API application exit with a failure status when startup fails. HTTP clients reject oversized responses, and Bisq avoids deleting files through links or Windows junctions.

API for Mobile Clients

• The API gets a node info endpoint and a check for banned seller account data. Its offerbook shows the same offers as the desktop offerbook, with a seller reputation verdict on each offer.

Mandatory Update Before November 25, 2026

All nodes must update to Bisq 2.1.14 or later before November 25, 2026.

From that time, updated nodes will require V2 storage signatures. Older versions will experience network connectivity and data transmission issues and will no longer be supported.

Installation

macOS

Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:

Grant permissions by:

• run sudo xattr -rd com.apple.quarantine /Applications/Bisq2.app in a terminal (type Terminal in the Apple search box)
• open Bisq2 again

More details can be found here.

Windows

For similar reasons you will get that warning at Windows: Windows protected your PC

• Click the More info button when prompted
• Click the Run anyway button when prompted

More details can be found here.

Verify download

See the verification and installation instructions in the Bisq Wiki.