Posts Tagged: "Security"
BasicSwap v0.18.0 through v0.18.5: Refund-Path Hardening, a Reworked Mercy Path, and Coin-Core Updates
By BasicSwap Team on August 24, 2026
Six BasicSwap releases in one post. v0.18.0 brings stricter fee verification, tighter Electrum connections, and an AMM rate-poisoning guard. v0.18.1 through v0.18.3 harden the adaptor-sig refund path against fee-replacement. v0.18.4 and v0.18.5 rework the altruistic mercy keyshare path, prune stale offers, and raise the swap protocol version again. Update recommended, and the Decred and Firo core updates are mandatory.
BasicSwap v0.17.8 and v0.17.9: Bitcoin Cash Swap Hardening, Shorter Swap Timeouts, and a Litecoin Core Update
By BasicSwap Team on August 2, 2026
Two BasicSwap releases in one post. v0.17.8 hardens Bitcoin Cash swaps and fixes a bug that could leave a BCH swap stuck on a non-default fee rate. v0.17.9 shortens swap timeouts by default, hardens how long a swap waits on a counterparty, and bumps the Litecoin core to v0.21.5.6, which carries important Litecoin security fixes. Update recommended, and promptly if you run Bitcoin Cash or Litecoin.
BasicSwap v0.17.7: A Critical Security Fix for Adaptor-Signature Swaps (Update Now)
By BasicSwap Team on August 1, 2026
BasicSwap v0.17.7 is a critical security fix for adaptor-signature swaps. It tightens how BasicSwap validates signatures from a swap counterparty and repairs any swap already affected. A drop-in from v0.17.6, mandatory for anyone running these swaps. Update now.
BasicSwap v0.17.6: Offer-Revoke Hardening, Smarter Login Sessions, and Electrum Transaction History
By BasicSwap Team on July 28, 2026
BasicSwap v0.17.6 hardens the network against offer-revoke spam, replaces the fixed login timeout with activity-based sessions managed from a new Security settings tab, and brings transaction history to Electrum light wallets. No coin-core updates and no database migration this time.
BasicSwap v0.17.3 to v0.17.5: Web-UI Host Allowlist, Merkle-Verified Electrum Confirmations, and Coin-Core Updates
By BasicSwap Team on July 20, 2026
Three BasicSwap hardening releases in one post: a web-UI Host allowlist, Merkle-verified Electrum confirmations, and updated Bitcoin, Dash and Monero cores. Update to v0.17.5, run the core update step, and set allowed_hosts if you reach the UI over a LAN name or reverse proxy.
BasicSwap v0.17.2: A Security Fix for Adaptor-Signature Swaps (Update Now)
By BasicSwap Team on July 14, 2026
BasicSwap v0.17.2 fixes a fund-safety race condition on the automatic refund path of adaptor-signature (Monero-style) swaps, along with watcher hardening, a BCH recovery fix, and AMM and bid-page fixes. Everyone should update before resuming swaps. No coin cores and no database migration this cycle.
BasicSwap v0.17.1: Light-Wallet Hardening, Automatic Key Migration, and AMM Fixes
By BasicSwap Team on July 12, 2026
BasicSwap v0.17.1 is a security and fixes release: Electrum light-wallet trust-boundary hardening, automatic migration of older imported keys to stronger encryption, Simplex connection hardening, and a batch of AMM v0.5.1 fixes. No coin cores and no database migration this cycle.
BasicSwap v0.17.0 & GUI 4.0.0: Redesigned Offers, Live Updates, and Web-UI Hardening
By BasicSwap Team on July 9, 2026
BasicSwap v0.17.0 lands GUI 4.0.0 with a redesigned Create Offer flow, live-updating tables, safer offer modes, AMM v0.5.0, and a web-UI security hardening pass. No coin cores changed this cycle. Update to v0.17.0.
Hardening the Atomic Swap Protocol: BasicSwap v0.16.3 to v0.16.6
By BasicSwap Team on June 22, 2026
A series of releases that harden BasicSwap's atomic-swap protocol: stronger lock-amount checks, symmetric refund-signature verification, receive-address-reuse prevention, automatic fee validation, and updated coin cores (Particl 27.2.4, mandatory Dash 23.1.4). Update to v0.16.6.
Architecture as Defense: Why the RetoSwap Exploit Can't Happen on BasicSwap
By BasicSwap Team on May 25, 2026
A fake-ACK exploit drained funds from RetoSwap on May 20, 2026. The same attack cannot work against BasicSwap, and the reason is architectural.