Damus
Wasabi Wallet profile picture
Wasabi Wallet
@WasabiWallet

Open-source, non-custodial, privacy focused Bitcoin wallet for Desktop

Relays (17)
  • wss://nos.lol/ – read & write
  • wss://relay.nostr.band/ – read & write
  • wss://soloco.nl/ – read & write
  • wss://relay.wasabiwallet.io/ – read & write
  • wss://relay.damus.io/ – read & write
  • wss://nostr.fmt.wiz.biz/ – read & write
  • wss://nostr.oxtr.dev/ – read & write
  • wss://relay.primal.net/ – read & write
  • wss://eden.nostr.land/ – read & write
  • wss://nostr.land/ – read & write
  • wss://nostr.thesamecat.io/ – read & write
  • wss://nostr.wine/ – read & write
  • wss://offchain.pub/ – read & write
  • wss://relay.bitcoinpark.com/ – read & write
  • wss://relay.mostr.pub/ – read & write
  • wss://relay.nostr.bg/ – read & write
  • wss://relay.snort.social/ – read & write

Recent Notes

Johnny · 5w
nostr:nprofile1qqsf80gvdu7vhtj88z9srtrvuzevqyc3fh9yczxkufcj6nlhzsz68scmupga8 Nearly 5 months of notice before the indexer goes dark on March 1, 2027 is the responsible way to retire infrastructure, and more than a lot of hosted services give. Anyone still on an older Wasabi build has a clear date to...
Wasabi Wallet  profile picture
Here's the fully corrected text:

> "Compatibility passphrase was used! Please consider generating a new wallet to ensure recoverability!"

If Wasabi has been displaying that message to you for the last 5 years, well… it's time to take action.

---

**tl;dr**

Because of a clipboard bug on macOS (OSX) in the Avalonia UI framework, users who created wallets by pasting complex passwords (with non-ASCII characters) got their password silently corrupted. When they later tried to log in by typing the correct password, it didn't match.

When a user enters their passphrase, if it is incorrect, Wasabi derives the corrupted passphrase and tries that one instead — in case of success, it alerts the user with the warning message above. We assume that after 5 years without any news about this issue, no one is affected. We will still give months before removing it.

---

**Long version:**

Some users were locked out of their wallets after updating Wasabi because the password they entered when logging in didn't match the password stored in the wallet file.

**The Root Cause**

There was a clipboard bug on macOS (OSX) in the Avalonia UI framework. When a user pasted a password from the clipboard:

1. Avalonia retrieved the clipboard content as raw bytes plus a "size" value.
2. The size was incorrectly taken from the string length (number of characters) instead of the byte length.
3. This matters because UTF-8 encoding uses variable bytes per character — special characters (like ä, ö, ñ, ¾) use 2–4 bytes each, while ASCII characters use 1 byte.

**Example:** A password like "Café" has 4 characters but takes 5 bytes in UTF-8 (C-a-f-é, where é = 2 bytes). The buggy code would only read 4 bytes, giving "Caf" plus a partial/corrupted character.

**What Happened**

Users who created wallets by pasting complex passwords (with non-ASCII characters) got their password silently truncated and corrupted. The wallet was created with the buggy password, but when they later tried to log in by typing the correct password, it didn't match.

**The Fix**

The compatibility feature tries multiple password variations when logging in:

1. The exact password entered.
2. The "buggy clipboard" version (truncated to string length in bytes).
3. A variant where the last character might be the replacement character \ufffd.

If the original password fails but a buggy variant works, the user is warned:
"Compatibility passphrase was used! Please consider generating a new wallet to ensure recoverability!"

This allows affected users to access their funds while warning them that their wallet was created with a corrupted password (which would be unrecoverable using standard BIP39 tools).
2❤1
Wasabi Wallet  profile picture
Tor 0.4.8 and earlier versions will stop working after September 1st, 2026.

This means that Wasabi versions older than v2.8.0 will stop working as well.

Latest Wasabi version v2.8.1 is not affected. Please upgrade.
1🤔1
Wasabi Wallet  profile picture
🚨 New release 2.8.0 is here

⚙️ P2P synchronization for compact filters
🚀 Pay in coinjoin
♻️ Payment batching
📎 Support for arm64 Linux, Tails, and Whonix
📜 Scheme scripting language
↘️ Sub-1 sat/vByte transaction fees
🔑 Signet test network
💀 Forward compatibility for Tor

---

## Feature Highlights

⚙️ P2P synchronization for compact filters

No central server needed anymore — Wasabi now runs fully independently.

🚀 Pay in CoinJoin

Make payments straight from CoinJoin, so privacy is preserved in everyday use. (experimental)

♻️ Payment batching

Batch outputs into one transaction for lower costs and smarter blockspace use.

📎 Support for arm64 Linux, Tails, and Whonix

Renewed support for the privacy-preserving operating systems we should never have abandoned.

📜 Scheme scripting language

Wasabi is now programmable what makes it easier to integrate with AI agents and tooling. (experimental) It doesn't have access to your money.

↘️ Sub-1 sat/vByte transaction fees

Pay less; hodl more. Available for Wallet and Coordinators which can also use this to make coinjoins cheaper.

🔑 Signet test network

Why not?

💀 Forward compatibility for Tor

The trigger for this release. After Sept 1st Tor clients from 0.4.8 (included in previous versions of Wasabi) will stop working.

📖 Read more here: https://github.com/WalletWasabi/WalletWasabi/releases/tag/v2.8.0
1❤️1
DG 🇸🇻 · 22w
Import bitcoin core wallet descriptors? 👀
note1fhqxt...
Wasabi Wallet  profile picture
That’s a good question, but this isn’t actually a new risk unique to Nostr. Any software distribution channel depends on some account or key. If an attacker gained access to GitHub maintainers’ accounts, or to DNS records, the outcome could be the same. Nostr doesn’t make this problem worse... it just changes the medium.

More importantly, Wasabi doesn’t auto-update. The client only notifies users that an update is available. Before any update is accepted, the client independently checks that the binaries are signed with our official PGP key, which is bundled into the software. If the signatures don’t match, the update is rejected.

On top of that, operating systems themselves add another layer of defense. Windows and macOS both enforce developer certificate checks at runtime, so an attacker would also need to compromise our Apple and Microsoft signing certificates to avoid OS-level warnings.

Compared to our previous GitHub-based distribution, this is actually a step up in security. Back then, compromising a single maintainer account could have been enough to trick clients into surfacing a malicious update. Now, even if someone compromised our Nostr key, they would still face multiple cryptographic and OS-level hurdles before a malicious build could ever be accepted by users’ machines.
Wasabi Wallet  profile picture
We are proud to announce that Wasabi Wallet v2.7.0 is our first release fully distributed through Nostr.

Instead of relying on GitHub or DNS, clients now receive update notifications directly from notes published by Wasabi’s Nostr public key. This ensures that even in the event of infrastructure outages or black swan scenarios, we can deliver emergency fixes seamlessly.

For users, the update process remains unchanged: smooth, secure, and reliable.
For the project, this marks an important step toward resilience: guaranteeing that users will always be able to securely access their funds with Wasabi, without sacrificing privacy by restoring seeds on less private wallets.

Of course, we also want to thank relay operators for making it possible to implement features like this.
11❤️1💜1
note1g9ncf...
Wasabi Wallet  profile picture
Because of how settings are implemented in Wasabi, when a CLI argument is specified (what it seems you did), modifying settings from the UI could create weird behavior. Lately we made a lot of improvements to how settings work, so it would make sense to remove this restriction, however we didn't make this "feature" yet.
Wasabi Wallet  profile picture
🚨 New release 2.7.0 is here! 🚨

v2.7.0 is a stabilization update that boosts reliability while bringing a fresh look & smoother performance.

🟠 Enhanced Node Integration
🎨 Refreshed UI
⚙️ 1 Config/Network
🤯 Smarter Coordinators
🛠️ Many Bug Fixes

👉https://github.com/WalletWasabi/WalletWasabi/releases/tag/v2.7.0

🟠 Enhanced Bitcoin Node Integration

Bitcoin node connectivity is now more seamless. RPC endpoint handling has been refined for smoother setup, with support for onion-service RPC interfaces.

Additionally, Wasabi no longer bundles bitcoind binaries, while block downloading has been simplified and made more dependable.

🎨 Refreshed UI with Icons & Animations

The interface has been given a polished update. Subtle animations and a balanced color scheme breathe new life into Wasabi’s design, making it both cleaner and less aggressive.

⚙️ Dedicated Config Files Per Network

Each network Mainnet, Testnet4, and Regtest — now has its own independent configuration file. Switching to test networks is easier and your preferences are always preserved.

🤯 Stronger & Smarter Coordinators

Coordinators are automatically published as onion services right out of the box: no manual Tor setup needed. Coordinators can now also run on pruned nodes in blocksonly mode.

Plus, fallback fee rate providers were implemented (mempool.space and blockstream.info), ensuring accurate fee estimates, even if your node can’t provide them.

🛠️ Refinements & Fixes

- Full-RBF by default: All transactions are treated as replaceable.
- Resilient HTTP communication: Smarter retry handling makes connections sturdier.
- Seed recovery fixes: Annoying typing issues are resolved.
- Sharper fee estimations: Precise decimal calculations with no rounding loss.
- NBitcoin updated to 8.0.14: Latest Bitcoin protocol improvements included.
- Clearer terminology: “Backend” is now called “Indexer.”
- Lean codebase: Legacy components like TurboSync and BlockNotifier removed.
- Safer Coinjoin handling: Excluded Coins can only be changed when Coinjoin is paused.
- Donation Button removed from Main Screen: The button is gone, but donations are still possible via the search bar.
- Conflux by default: Better Tor configuration for improved connectivity.
1