7/ πΎ How to upgrade https://github.com/cryptoadvance/specter-diy/releases/tag/v1.10.5 Copy specter_upgrade_v1.10.5.bin to an SD card and insert it into your Specter-DIY. The bootloader verifies the signatures and installs the firmware. β οΈ On v1.9.0 or older? Install v1.10.3 first β it was the mandatory signing-key rotation release.
6/ π Security documentation We added a proper SECURITY.md disclosure policy, refreshed the security model and documented what data Specter stores and where. We also fixed the broken udev documentation link.
5/ π οΈ Reproducible builds fixed Release builds no longer depend on clone-local Git metadata. The same source can now produce byte-identical firmware across different checkouts, making independent verification of release binaries possible again.
3/ β οΈ Mixed-wallet input warnings If a transaction spends inputs from multiple wallets, Specter now warns you again before signing. This restores an important warning path for unusual or potentially malicious PSBTs.
2/ π Stricter change verification Change is no longer trusted based on host-supplied metadata alone. Specter now re-derives the output on-device and only treats it as change if it cryptographically matches the wallet descriptor.
1/ TRNG failure handling If the hardware true-random-number generator stalls, Specter now detects obviously broken output and stops with an error instead of silently treating it as entropy.