Active development: 87 commits across 2 contributors
Code ActivitySource linked
11 active day(s) in keepkey/keepkey-vault.
keepkey-vault
Utility
Verified BuilderKeepKey Vault - Desktop hardware wallet companion app
ShippingLast ship 6d ago
Latest ship
Builder activity
Build timeline
KeepKey Vault v1.5.4
Github ReleaseSource verified
## What's new - Certified ClearSign coverage for real Solana Relay LUT routes and Portals EVM swaps, reducing blind-signing paths. - Provider-key derivation through the BIP-85 ceremony. - Robinhood Chain (`eip155:4663`) support. - Certified KeepKey emulator runtime 7.16.0 bundled directly in the macOS apps; no separate emulator install is required. ## Reliability fixes - Failed balance lookups are no longer presented as zero balances across dashboard, send, builder, and swap flows. - The dashboard keeps every chain visible and shows per-chain pending state. - Mobile pairing exports all known a
View evidenceKeepKey Vault v1.5.3
Github ReleaseSource verified
Wallet creation becomes a security ceremony you can audit, device firmware is verified by hash instead of by version string, and Zcash stops mis-selecting its consensus branch. ## What's New - **Creating a wallet is now a three-step ceremony.** Randomness and dice are their own security steps rather than options buried in setup, each with its own window. A device that fails the randomness check cannot proceed to wallet creation — the gate is hard, not advisory. - **An RNG health test, offered before the wallet exists.** It runs against the connected device and reports honestly: three-state res
View evidenceKeepKey Vault v1.5.2
Github ReleaseSource verified
A maintenance release: the desktop shell moves up five versions, and QR scanning on macOS starts working again. ## Bug Fixes - **Camera QR scanning was broken on macOS.** The app never declared `NSCameraUsageDescription`, so macOS had no reason to grant camera access when you opened the QR scanner. Scanning an address by camera now prompts properly, with an explanation of why a wallet is asking. Affected every macOS build up to and including 1.5.1. ## Under the Hood - **Electrobun 1.13.1 → 1.18.1.** The desktop runtime was five stable releases behind. Brings upstream fixes to window handling,
View evidenceKeepKey Vault v1.5.1
Github ReleaseSource verified
## What's New - **ClearSign Studio** — author, inspect and sign Solana clear-sign instruction schemas from inside Vault, plus a Solana outflow check that flags transactions moving funds out of your accounts (#402) - **Hardware-verifiable x402 payments** — an x402 payment intent is never trusted as sent. The signing path re-derives network, sponsor, mint, amount, authority and destination token account from the actual transaction and matches them against the exact v0 message before the device is asked to sign (#403) - **Reusable clear-sign schemas for Relay swaps** — a schema signed once per pr
View evidenceKeepKey Vault v1.5.0
Github ReleaseSource verified
## KeepKey Vault v1.5.0 Feature release centered on Zcash shielded privacy — a full round of live-fire fixes from real shield/unshield sessions — plus swap safety boundaries, Hive REST signing, and the local MCP agent bridge. ### What's New - **Zcash shielded balances, first-class on the dashboard.** The Zcash row now shows your combined transparent + shielded ZEC with a dedicated shield-glyph breakout of the shielded portion (sidebar and drilled-in view). Shielded ZEC gets a proper bundled zZEC icon everywhere — token rows, detail headers, activity — including fully offline. - **Balances reco
View evidenceKeepKey Vault v1.4.11
Github ReleaseSource verified
## KeepKey Vault v1.4.11 Hotfix release — a single fix, nothing else. ### Bug Fixes - **Fixed signing EIP-712 typed data for Hyperliquid (and any dApp using colon-namespaced type names).** Signing would previously fail with a generic "Failed to sign typed ETH message" error whenever a dApp's `primaryType` contained a colon — e.g. Hyperliquid's `HyperliquidTransaction:ApproveAgent`. The underlying `eip-712` struct-hashing library truncated type names at the first non-word character, silently mangling the lookup and crashing. This affects all ~12 of Hyperliquid's user-signed action types (`Appro
View evidenceKeepKey Vault v1.4.10
Github ReleaseSource verified
## KeepKey Vault v1.4.10 > **Pre-release** — published for testing; on-device verification of the new account-N audit recovery (#299) is still in progress before stable promotion. ### What's New - **Recover funds beyond account 0** — the audit wizard now tracks and sweeps UTXO-altcoin funds on non-default accounts (#299), plus an LTC uncommon-path pipeline with in-audit sweep to a standard address (#321) - **Scan the screen for a QR code** — third scan option alongside camera and file (#325); WalletConnect pairing now uses the live-camera scanner (#301) - **Cipher recovery over REST + SDK** —
View evidenceKeepKey Vault v1.4.9
Github ReleaseSource verified
## KeepKey Vault v1.4.9 ### What's New - **THORChain RUJI / TCY / secured-asset signing** — custom-denom signing support for THORChain secured assets (RUJI, TCY). Verified on-device. (#292) - **Hive settings feature flag** — Hive is now gated behind a settings toggle (default **off**); corrected the firmware gate from 7.16 → 7.15. (#293) ### Bug Fixes - **Windows build** — build the `proto-tx-builder` dist during the Windows production build, fixing the runtime `createFeegrantAminoConverters is not a function` error. (#295) ### Downloads | Platform | File | |---|---| | macOS (Apple Silicon) |
View evidenceKeepKey Vault v1.4.8
Github ReleaseSource verified
## KeepKey Vault v1.4.8 Patch release. Fixes Cosmos-family transactions and the swap header. ### Bug Fixes - **Cosmos transactions work again** — send, delegate, and undelegate on Cosmos-family chains (ATOM, OSMO, etc.) were crashing with `createFeegrantAminoConverters is not a function`. The release pipeline was bundling a stale `proto-tx-builder` build; the build now always rebuilds the signing modules from pinned source, so the correct amino-converter code ships (#290). - **Swap header** — removed a hardcoded third-party brand string from the swap dialog title; it now shows the correct loca
View evidenceKeepKey Vault v1.4.7
Github ReleaseSource verified
## KeepKey Vault v1.4.7 Patch release. Emulator seed-restore reliability and watch-only fixes. ### Bug Fixes - **Emulator: reload the saved seed when the persisted flash boots a stale/wrong seed** (#287). The emulator flash is not a trustworthy seed store — the firmware's storage wrapping key changes per init, so a persisted flash could boot a *different* seed than the one saved. The connect smoke-test passes on any valid seed, so the wrong wallet could be presented as ready. Vault now compares the live BTC xpub against the saved mnemonic and deterministically reloads the saved seed on mismatc
View evidenceKeepKey Vault v1.4.6
Github ReleaseSource verified
KeepKey Vault v1.4.6 A hardening + fixes release focused on Zcash shielded (Orchard) sends, the Windows installer, and watch-only mode. ## Highlights - **Zcash shielded (private) sends — NU6.2 compatible + hardened.** Upgraded to the post-NU6.2 Orchard circuit (fixes "could not validate orchard proof" on mainnet), with correct Merkle-root/anchor construction for shield, deshield, and z→z PCZTs. Every shielded transaction is now locally validated — Orchard proof verification, full BatchValidator, and a device-signed-vs-consensus sighash check — before it is broadcast, and is broadcast to multip
View evidenceKeepKey Vault v1.4.5
Github ReleaseSource verified
## KeepKey Vault v1.4.5 Maintenance release on top of v1.4.4 — swap UX refinements, custom transaction fees, dashboard/asset polish, and reliability fixes. ### What's New - **Custom transaction fees** (#260) — slow/normal/fast presets restored to EVM and Cosmos sends (previously UTXO-only), plus a free-form custom fee (EVM gwei + gas limit on legacy txs, UTXO sat/vByte). - **Swap side panel** (#254, #255) — the swap experience now lives in a right-slide side panel with KeepKey branding; feature-flagged as an in-code constant. - **Front-page quick actions** (#256) and **swap version proof** (#2
View evidenceKeepKey Vault v1.4.4
Github ReleaseSource verified
## ✨ What's New **Audit Balances wizard** — a guided, multi-chain "where's my money?" tool. It scans your accounts on every chain, finds funds stranded on non-standard derivation paths (legacy/SegWit, higher accounts, other wallets' layouts like Ledger Live / MEW), and walks you through recovering them. Honest by design — anything it can't verify is shown as "couldn't verify," never a false $0. **Portfolio fault tolerance** — when a balance source is degraded or unreachable, the dashboard now says "couldn't reach X" instead of silently showing $0, and retries automatically on reconnect. **Addr
View evidenceKeepKey Vault v1.4.3
Github ReleaseSource verified
## KeepKey Vault 1.4.3 ### What's New - **Cross-chain swaps are now always available** — the swaps feature flag has been removed, so the Swap action appears automatically on every chain ShapeShift/Pioneer reports as swappable. - **Windows USB troubleshooter** — when a connected KeepKey isn't detected on Windows, a new "Run diagnostics" option on the connect screen identifies the likely cause (slow driver bind, conflicting driver, cached bad driver record, or no device) and produces a copy-ready report for support. - **Dashboard polish** — larger portfolio donut chart and a tighter, cleaner orb
View evidenceKeepKey Vault v1.4.2
Github ReleaseSource verified
# KeepKey Vault v1.4.2 ## ✨ What's New - **Address Book** — a unified, top-level Address Book across all your wallets: per-device tabs, manual add dialog, device-seeded identicons, connected/external badges, full addresses, copy-to-clipboard, and a global network filter above the tabs. - **THORName / MAYAName registration** — register THORNames and MAYANames directly from the asset page, with native-fee display. - **Explore tab** — the "Apps" tab is now **Explore**, with app tiles. - **Dashboard polish** — branded "loading dashboard" state with a spinning KeepKey; hovering the donut now highli
View evidenceKeepKey Vault v1.4.1
Github ReleaseSource verified
## KeepKey Vault v1.4.1 A focused release adding incoming-payment notifications, Solana SPL token swaps, and richer swap status — plus security and reliability fixes around device switching and swaps. ### ✨ What's New - **Incoming-payment toast + auto-refresh** — when a payment lands on one of your addresses, you get a notification and that chain's balance refreshes automatically. (Previously, received funds could silently fail to update your balance.) - **Solana SPL token swaps** — paste a Solana token mint to swap custom SPL tokens; Vault resolves its name, symbol, decimals, and icon. The de
View evidenceKeepKey Vault v1.4.0
Github ReleaseSource verified
## What's Changed * infra: add publish-electrobun-linux-x64-core workflow by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/153 * fix(scripts): tolerate GLIBC-less binaries in publish-core build script by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/154 * fix(ci): disable -e/pipefail in publish-core glibc verify step by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/155 * fix: portfolio balance reliability — failedPubkeySet, no-walk-backwards cache, api-blue selector by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/178 * re
View evidenceKeepKey Vault v1.3.6
Github ReleaseSource verified
## What's Changed * [codex] Fix max send across native and token swaps by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/173 * [codex] Fix splash logo centering by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/172 * [codex] fix relay swap status tracking by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/174 * Merge release 1.3.5 Windows fixes by @mtlouzada in https://github.com/keepkey/keepkey-vault/pull/170 * Fix duplicate tokens in list and scam tokens bypassing spam filter by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/
View evidenceKeepKey Vault v1.3.5
Github ReleaseSource verified
## What's New - Zcash privacy send flow improvements, including QR scan support, simplified privacy UI, and improved history display. - Production builds now ship the `zcash-cli` sidecar required by the Zcash flow. - BIP-85 support is locked to firmware 7.16.0+. - Windows launch build and release documentation were hardened. - Release SOP and macOS signing checks were tightened. ## Bug Fixes - Fixed EVM asset balances so they follow the selected address. - Fixed a dashboard Zcash refresh TDZ crash. - Fixed dashboard token warnings for empty wallets. - Fixed balance refresh fallback handling. #
View evidenceKeepKey Vault v1.3.4
Github ReleaseSource verified
## What's Changed * chore: lock BIP-85 to firmware 7.16.0+ by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/159 * fix: ship zcash-cli binary in prod + Zcash UX improvements by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/160 * fix: switch EVM asset balances by selected address by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/161 * fix(windows): harden 1.3.2 launch build and docs by @mtlouzada in https://github.com/keepkey/keepkey-vault/pull/162 * feat: add QR scan to Zcash privacy send tab by @BitHighlander in https://github.com/keepkey/ke
View evidenceKeepKey Vault v1.3.2
Github ReleaseSource verified
## What's Changed * fix(swap): route v0 Solana txs through solanaSignMessage by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/148 * ui-v3: redesign sweep + Zcash UI simplification by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/150 * swap polish: custom tokens + relay tracking by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/152 * fix(swap): harden EIP-1559 fee buffers by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/156 * Audit wallet activity namespacing and swap review safety by @BitHighlander in https://github.com/kee
View evidenceElectrobun Linux x64 Core (glibc 2.35, built from v1.13.1)
Github ReleaseSource verified
Electrobun Linux x64 core, built from upstream blackboardsh/electrobun @ `v1.13.1` on ubuntu-22.04 (glibc 2.35 floor). Contents: launcher, extractor, libNativeWrapper.so, libNativeWrapper_cef.so, libasar.so. Used by KeepKey Vault's Linux build to substitute for the upstream electrobun-core-linux-x64 tarball, which currently ships built against glibc 2.38 and excludes Debian 12 / Ubuntu 22.04 / RHEL 9.
View evidenceKeepKey Vault v1.3.1
Github ReleaseSource verified
**Full Changelog**: https://github.com/keepkey/keepkey-vault/compare/v1.3.0...v1.3.1
View evidenceKeepKey Vault v1.3.0
Github ReleaseSource verified
## What's Changed * feat(swap): full REST + UX overhaul; correctness fixes; rip TxReview gate by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/146 * feat(swap): asset-picker dialog + CAIP-only routing + matrix audit by @BitHighlander in https://github.com/keepkey/keepkey-vault/pull/147 **Full Changelog**: https://github.com/keepkey/keepkey-vault/compare/v1.2.17...v1.3.0
View evidence
Research notes
Written by HEY researchers and reviewed before publishing. Commentary with sources — not the project's own claims, and not evidence of shipping.
No published notes on keepkey-vault yet.
Know something about keepkey-vault? Sign in with GitHub to submit a research note. Notes are reviewed before they appear here.