haveno-dex/haveno v1.13.0

haveno-v1.13.0

on GitHub

What's Changed

Security

• Update Tor to v0.4.9.15 (Tor Browser 16.0), a security release.
• Ask for the wallet password before showing private keys.
• Offer only a plain file name when saving a dispute attachment, so a peer cannot steer where it is saved.
• Prevent forged mailbox messages from hiding real ones.
• Limit how fast peers can add permanent data to the network.
• Keep the Monero node login out of the wallet process command line.
• Keep mobile notification keys and message contents out of the logs.
• Stop rate limited API calls from running.
• Require a password to create an account through the API when passwords are required.
• Read the CLI password from the environment or a prompt.
• Verify the build tools used to produce installers.

UI

• Allow offers selling XMR to require a signed payment account from the taker.
• Repeat the notification sound for unread trade activity, every hour by default.
• Make the market depth chart interactive, with offers linked between the chart and the offer lists.
• Center the depth chart on the market price and extend it to the chart edges.
• Click a row in offers by currency to open its offer book.
• Show the offer book filters, table search fields and market currency selectors as pills.
• Show the selected currency's logo in currency pulldowns.
• List fiat currencies by name and code, with green badges.
• Sort the market currency list by offer count across all currency types.
• Add all trades, fiat trades and crypto trades totals to the trades chart.
• Show the Monero node lists as tabs, so browsing a list does not switch nodes.
• Show old Monero node failures as unchecked.
• Explain offer options with info icons instead of popups.
• Show what is reserved when not reserving the exact offer amount.
• Show trades completed or canceled by arbitration in trade history.
• Show the price deviation in trade details.
• Double click a transaction to open its details.
• Update translations.

Fixes

• Update monero-java to v0.8.65.
• Count trades settled by arbitration correctly in trade statistics and history totals.
• Fix the window no longer redrawing after Windows resumes from sleep.
• Fix password recovery not opening from Linux packages.
• Explain failed password recovery launches and unreadable wallets.
• Fix offers and trades failing when the network's only arbitrator is slow to connect.
• Fix a failed deposit confirmation message blocking the message to the other peer until restart.
• Fix account signing when the peer's account age was never published.
• Preserve prices and amounts when duplicating an offer.
• Fix some canceled offers showing as PENDING in history.
• Fix errors on very large amounts in the withdrawal and auto confirm limit fields.
• Fix Monero node edits waiting on an unresponsive node.
• Keep the payment method filter when its dropdown is closed without a choice.
• Apply a typed dropdown value when focus leaves, and cancel a dropdown search with Escape.
• Link an in dispute trade status to the view dispute button.
• Fit crypto prices in the market price selector.
• Split large message bundles instead of sending them oversized to a peer.
• Stop sending API notifications to disconnected clients.
• Use the Tor control port to find the SOCKS port with a static onion address.
• Update the default price providers.
• Run the local development network on Monero regtest.
• Support the Nix shell on NixOS.
• Update the Flatpak runtime to freedesktop 26.08.

Full Changelog: v1.12.0...v1.13.0

Running Haveno

For the best experience, running your own local Monero node is highly recommended, as the Tor network can be slow and unreliable when syncing with remote Monero nodes.

Haveno can be used on the Monero mainnet via third-party networks. We do not officially endorse any specific networks at this time. You can start your own network by following these guidelines.

Installation Notes

Download and install Haveno using an installer for your operating system. The installer is provided by the network you're using. Alternatively, you can build from source by customizing these instructions for your chosen network.

Windows & Linux

• Uninstall any previous versions of Haveno before running the installer.

macOS

1. Open installer and drag Haveno.app to Applications.
2. Open a terminal window (cmd + space then type "terminal").
3. Copy and paste into the terminal: sudo xattr -rd com.apple.quarantine /Applications/Haveno.app and press enter.
4. Enter your computer password.
5. Right click /Applications/Haveno.app > Open. Repeat again if needed, even if reported as damaged.

Tails

• See instructions. To upgrade, re-run the install one-liner. Replacing only the .deb in Persistent storage keeps an outdated launcher, and Haveno will fail to connect to Tor. Network administrators are encouraged to publish the one-line installation command for each release.

Default application directory:

• Linux: ~/.local/share/Haveno/
• macOS: ~/Library/Application Support/Haveno/
• Windows: ~\AppData\Roaming\Haveno\