Trezor will refuse to sign UTXOs that do not match the provided derivation path (e.g., transactions belonging to a different wallet, or synthetic transaction inputs).
@ -4,6 +4,43 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
## 2.5.1 [18th May 2022]
### Added
- Support Bitcoin payment requests. [#1430]
- Show "signature is valid" dialog when VerifyMessage succeeds. [#1880]
- Support ownership proofs for Taproot addresses. [#1944]
- Add extra check for Taproot scripts validity. [#2077]
- Support Electrum signatures in VerifyMessage. [#2100]
- Support Cardano Alonzo-era transactions (Plutus). [#2114]
- Support unverified external inputs. [#2144]
- Support Zcash version 5 transaction format [#2166]
- Add firmware hashing functionality. [#2239]
### Changed
- Ensure input's script type and path match the scriptPubKey. [#1018]
- Automatically choose best size and encoding for QR codes. [#1751]
- Bitcoin bech32 addresses are encoded in lower-case for QR codes. [#1751]
- Full type-checking for Python code (except Monero app). [#1939]
- \[debuglink] Do not wait for screen refresh when _disabling_ layout watching. [#2135]
### Removed
- GAME, NIX and POLIS support. [#2181]
### Fixed
- EIP-1559 transaction correctly show final Hold to Confirm screen. [#2020]
- Fix sighash computation in proofs of ownership. [#2034]
- Fix domain-only EIP-712 hashes (i.e. when `primaryType`=`EIP712Domain`). [#2036]
- Support EIP-712 messages where a struct type is only used as an array element. [#2167]
### Security
- Fix a coin loss vulnerability related to replacement transactions with multisig inputs and unverified external inputs.
### Incompatible changes
- Trezor will refuse to sign UTXOs that do not match the provided derivation path (e.g., transactions belonging to a different wallet, or synthetic transaction inputs). [#1018]
## 2.4.3 [8th December 2021]
### Added
@ -451,6 +488,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).