v4.48.1

Release notes

• Bundle BitBox02 firmware version v9.23.1
• Format BTC/sat spaces consistently in account summary and total balance
• Improved offline UX: added detection to show an offline warning banner and auto-reconnect when back online
• iOS: various UI improvements
• Add option to disable Bluetooth for BitBox02 Nova (non-iOS devices only)
• Disabled the option to enable Tor proxy on iOS
• Android: Fix occasional crash when unplugging the BitBox

Below is a copy of the release notes of v4.48.0, which was only released on iOS and does not have a dedicated
release. On the other platforms, these changes are released for the first time in v4.48.1:

• Bundle BitBox02 firmware version v9.23.0
• Removed the BTC/sat switch from the general settings in favor of a rotating unit in the account balance.
• Reduced support for BitBox01
• Fix a bug that would prevent the app to perform firmware upgrade when offline.
• Replace sidebar with bottom navigation bar for mobile devices
• Introduce full screen selector for mobile in place of dropdown
• Fix wrong estimated confirmation time for ERC20 tokens.
• Enable unlock test wallet in testnet
• Added support to show on the BitBox when a transaction's recipient is an address of a different account on the device.
• Persist third party widget sessions
• Change notes export file type to JSON Lines
• Add received date to coin control transaction details

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.48.1-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.48.1-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.48.1-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.47.3

Release notes

• Upgrade Etherscan API to V2

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.47.3-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.47.3-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.47.3-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.47.2

Release notes

This is a patch release for Linux only:

• Linux: fix compatibility with some versions of Mesa that are incompatible with the bundled wayland libraries

The release notes of v4.47.0 are repeated here:

• Bundle BitBox02 firmware version v9.22.0
• Added BTC Direct buy option
• Fix long transaction notes to show fully on multiple lines when necessary
• Improve send-to-self transactions in account overview
• Use native scrollbars on macOS, iOS and Android
• Fix address signing fail on screen rotation for Pocket and Bitsurance
• Restrict selection to text files when importing notes
• Display the hide amount button by default and remove its settings
• Linux: add support for Wayland
• Fix the copy buttons in the Pocket order confirmation page
• Android: handle device disconnect while the app is in the background
• Improve send result view show relevant infos and options to make a new transaction or go back
• Added an option in advanced settings to allow the app to start in testnet at the next restart.
• Improve the UI of buy & sell page for mobile devices
• Fixed export to CSV for ERC20 tokens.
• Added support for xpub_required in AOPP.
• Create desktop shortcut by default on Windows during installation
• Migrate from deprecated Walletconnect web3wallet to Reown, add Sepolia, Arbitrum, Base, and Optimism to supported chains
• Upgraded to Qt 6.8.2, dropping support for macOS 11 and Ubuntu 20.04.

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.47.2-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.47.2-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.47.2-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.47.1

Release notes

This is a patch release for Linux only:

• Linux: fix support for Wayland
• Linux: release device upon app close, enabling other apps to connect to the BitBox after the BitBoxApp closes

The release notes of v4.47.0 are repeated here:

• Bundle BitBox02 firmware version v9.22.0
• Added BTC Direct buy option
• Fix long transaction notes to show fully on multiple lines when necessary
• Improve send-to-self transactions in account overview
• Use native scrollbars on macOS, iOS and Android
• Fix address signing fail on screen rotation for Pocket and Bitsurance
• Restrict selection to text files when importing notes
• Display the hide amount button by default and remove its settings
• Linux: add support for Wayland
• Fix the copy buttons in the Pocket order confirmation page
• Android: handle device disconnect while the app is in the background
• Improve send result view show relevant infos and options to make a new transaction or go back
• Added an option in advanced settings to allow the app to start in testnet at the next restart.
• Improve the UI of buy & sell page for mobile devices
• Fixed export to CSV for ERC20 tokens.
• Added support for xpub_required in AOPP.
• Create desktop shortcut by default on Windows during installation
• Migrate from deprecated Walletconnect web3wallet to Reown, add Sepolia, Arbitrum, Base, and Optimism to supported chains
• Upgraded to Qt 6.8.2, dropping support for macOS 11 and Ubuntu 20.04.

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.47.1-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.47.1-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.47.1-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.47.0

Release notes

• Bundle BitBox02 firmware version v9.22.0
• Added BTC Direct buy option
• Fix long transaction notes to show fully on multiple lines when necessary
• Improve send-to-self transactions in account overview
• Use native scrollbars on macOS, iOS and Android
• Fix address signing fail on screen rotation for Pocket and Bitsurance
• Restrict selection to text files when importing notes
• Display the hide amount button by default and remove its settings
• Linux: add support for Wayland
• Fix the copy buttons in the Pocket order confirmation page
• Android: handle device disconnect while the app is in the background
• Improve send result view show relevant infos and options to make a new transaction or go back
• Added an option in advanced settings to allow the app to start in testnet at the next restart.
• Improve the UI of buy & sell page for mobile devices
• Fixed export to CSV for ERC20 tokens.
• Added support for xpub_required in AOPP.
• Create desktop shortcut by default on Windows during installation
• Migrate from deprecated Walletconnect web3wallet to Reown, add Sepolia, Arbitrum, Base, and Optimism to supported chains
• Upgraded to Qt 6.8.2, dropping support for macOS 11 and Ubuntu 20.04.

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.47.0-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.47.0-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.47.0-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.46.3

Release notes

This is a patch release for Linux only which fixes access to the camera. The release notes of v4.46.0 are repeated here:

• Add BTC Direct private trading desk information
• Label change UTXOs as "change" in coin control
• Revamp transaction history in account overview to improve legibility
• macOS: create a universal build that runs natively on arm64 and amd64
• Show fiat amount at the time of the transaction in transaction history
• Android: enable export logs feature
• Android: fix stuck back button after closing a dialog
• Fix qrscanner when rotating the device or resizing the window
• Fix authentication view glitch at startup
• Remove "No priority" from fee options
• Fix Moonpay widget loading issues
• Remove support for the deprecated Ethereum Goerli network

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.46.3-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.46.3-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.46.3-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.46.2

Release notes

This is a patch release for Linux only which fixes the app launching with a blank screen. The release notes of v4.46.0 are repeated here:

• Add BTC Direct private trading desk information
• Label change UTXOs as "change" in coin control
• Revamp transaction history in account overview to improve legibility
• macOS: create a universal build that runs natively on arm64 and amd64
• Show fiat amount at the time of the transaction in transaction history
• Android: enable export logs feature
• Android: fix stuck back button after closing a dialog
• Fix qrscanner when rotating the device or resizing the window
• Fix authentication view glitch at startup
• Remove "No priority" from fee options
• Fix Moonpay widget loading issues
• Remove support for the deprecated Ethereum Goerli network

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.46.2-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.46.2-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.46.2-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.46.1

Release notes

This is a patch release for Android only which fixes the app crashing on old Android versions. The release notes of v4.46.0 are repeated here:

• Add BTC Direct private trading desk information
• Label change UTXOs as "change" in coin control
• Revamp transaction history in account overview to improve legibility
• macOS: create a universal build that runs natively on arm64 and amd64
• Show fiat amount at the time of the transaction in transaction history
• Android: enable export logs feature
• Android: fix stuck back button after closing a dialog
• Fix qrscanner when rotating the device or resizing the window
• Fix authentication view glitch at startup
• Remove "No priority" from fee options
• Fix Moonpay widget loading issues
• Remove support for the deprecated Ethereum Goerli network

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.46.1-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.46.1-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.46.1-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.46.0

Release notes

• Add BTC Direct private trading desk information
• Label change UTXOs as "change" in coin control
• Revamp transaction history in account overview to improve legibility
• macOS: create a universal build that runs natively on arm64 and amd64
• Show fiat amount at the time of the transaction in transaction history
• Android: enable export logs feature
• Android: fix stuck back button after closing a dialog
• Fix qrscanner when rotating the device or resizing the window
• Fix authentication view glitch at startup
• Remove "No priority" from fee options
• Fix Moonpay widget loading issues
• Remove support for the deprecated Ethereum Goerli network

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.46.0-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.46.0-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.46.0-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

v4.45.0

Release notes

• Bundle BitBox02 firmware version v9.21.0
• Bitcoin: add support for sending to silent payment (BIP-352) addresses
• Prevent macOS from going to sleep on long running interactions with the BitBox

Verifying the release

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.45.0-macOS.dmg.asc

You should see the following output:

gpg --verify BitBox-4.45.0-macOS.dmg.asc
gpg: assuming signed data in 'BitBox-4.45.0-macOS.dmg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)