Changelog
Keep up with the latest Freighter updates.
5.48.0
5.48.0
π New Features
π Bug Fixes
v1.25.28
What's Changed
5.47.0
5.47.0
_Improvement_
:wrench: discover: support hyperlinks and newlines in protocol descriptions (#2989)
v1.24.28
Security
Fixes a HackerOne-reported issue (tracked as wallet-eng-monorepo#59). validateAuthEntryAddress previously only enforced the bound-address check when the address was an account; a contract-bound ADDRESS_V2
preimage skipped it entirely and got signed β exactly the shape of a delegated-auth request, so a dApp could obtain a delegate signature over a smart wallet the user was never shown. Now every ScAddress arm
is rendered via addressToString and compared to the wallet key; unrenderable arms fail closed. Matches the extension's behavior. The test that previously asserted the vulnerable outcome was flipped.
Dependencies / Protocol 28
Mobile port of stellar/freighter#2977. Brings Protocol 28 XDR (@stellar/js-xdr 5): class-based xdr namespace, int64 β bigint, Buffer β Uint8Array returns. Every site that relied on .toString("hex"|"base64")
on SDK bytes now uses explicit xdr.encodeBytes (SEP-53 sign-message, SEP-43 sign-auth-entry, auth JWT, analytics account hash, wasm hash/salt rendering). CAP-85 support: CONTRACT_EXECUTABLE_EXTERNAL_REF and
SCV_EXECUTABLE_TAG decode in invocation args/details, with an "unrecognized invocation" warning instead of a render-time throw. 17.0.1 chosen over 17.0.0 for the deprecated-alias safety net. Verified: tsc
clean, 223 suites / 2984 tests, Metro prod bundle builds, dev build boots on Hermes. Not yet tested on Android.
WalletKit UX
Android-only fix: long sign-message / sign-auth-entry payloads couldn't be scrolled because gorhom's content-pan gesture cancelled the nested ScrollView. Sets enableContentPanningGesture={false} for those
two request types. Trade-off: swipe-to-dismiss on the sheet body is gone for those sheets (handle drag, backdrop tap, Cancel still work). Transaction requests are untouched.
CI / PR previews
prPreviewIos.yml clones the private freighter-config repo with a read-only deploy key (torn down before PR code runs), maps the PR author β their sandbox backend v1/v2 URLs, and bakes them into .env. Falls
back to staging when there's no entry, and to staging + a preview-degraded label when the config is unreachable. Sticky comment and release notes now state the target backend. Part of Fullstack PR Preview
Phase 2 (#859).
New prPreviewAndroid.yml, the missing Android leg. Builds an installable assembleDevRelease APK signed with the checked-in debug keystore, reuses the same freighter-config sandbox resolution as iOS,
publishes to a pr-preview-android-<N> draft release with its own sticky comment. Verified green in CI with the APK resolving to the author's sandbox.
Housekeeping
Themes: this is a security-and-infrastructure cycle rather than a feature one β the Protocol 28 SDK migration and the CAP-71 fix together get the wallet ready to correctly decode and refuse the new auth-entry
shapes, while the two CI PRs complete the full-stack PR preview flow on both platforms. Note that main is also 1 commit behind the v1.23.27 tag (the tag was cut off the release PR branch), which is normal for
this repo's release process.
5.46.0
Upgrades to @stellar/stellar-sdk@v17.0
Adds handling for ContractExecutableType::CONTRACT_EXECUTABLE_EXTERNAL_REF = 2 and SCValType::SCV_EXECUTABLE_TAG = 22 in transaction/auth entry signing XDR parsing.
For full details, see #2977
v1.23.27
:sparkles: What's new
β’ Home design refresh (#943, #946, #970, #976, #977)
:hammer_and_wrench: Improvements
β’ Configure Fees design refresh (#913)
β’ Total USD label now matches with extension ("$0.00" vs "--") (#978)
β’ "Usage data sharing" toggle + accurate disclosure (#959)
β’ Discord removed as a supported feedback channel (#979)
:bug: Fixes
β’ Sentry is now fully off when data sharing is off (#958)
β’ All operation fields show on the transaction signing screen (#968)
β’ Sign button stays visible for long dApp messages (#963)
5.45.0
This release contains, among other features/fixes, the Home design refresh and SEP-53 message signing for hardware wallets.
_New Features_
β Home design refresh (#2930, #2931, #2932, #2933, #2934, #2935, #2936, #2937, #2963, #2964, #2965)
β Add SEP-53 message signing support for hardware wallets (#2952)
_Improvements_
:wrench: Default the "You receive" token to USDC on swap (#2940)
:wrench: Total USD label now matches with mobile ("$0.00" vs "--") (#2960)
:wrench: "Usage data sharing" toggle + accurate disclosure (#2924)
:wrench: Remove the "Introducing Freighter Mobile" promo banner (#2962)
:wrench: Remove Discord link from Leave Feedback view (#2966)
:wrench: Update network dropdown labels (#2784)
:wrench: Add fork-safe indexer fallbacks (#2943)
:wrench: Extract WalletRow, RenameWallet and AddWallet into components (#2929)
_Bug Fixes_
:bug: Stop the sign-tx site scan and icon fetch clobbering each other (#2948)
v1.22.27
Release Changes
> Includes everything from the (iOS skipped) v1.21.27 build plus the v1.22.27 hot fix.
π Auth & identity
β¨ New features
π Improvements
π Fixes
C⦠address now target the asset's own contract.5.44.0
_Improvements_
:wrench: Show all operation fields in the transaction signing details view (https://github.com/stellar/freighter/pull/2829)
:wrench: Improve Add Token disclosure for SACs (https://github.com/stellar/freighter/pull/2869)
:wrench: Cross-platform analytics schema alignment β property-model foundation (https://github.com/stellar/freighter/pull/2903)
:wrench: Use the seed-derived auth pubkey as the Amplitude/Sentry user_id (https://github.com/stellar/freighter/pull/2910)
:wrench: Route all backend-v2 calls through the authed fetch chokepoint (https://github.com/stellar/freighter/pull/2880)
:wrench: Derive the backend auth keypair from the seed (https://github.com/stellar/freighter/pull/2876)
:wrench: Bump the major dependency group across 5 directories, 44 updates (https://github.com/stellar/freighter/pull/2898)
_Bug Fixes_
:bug: Fix send-flow asset list formatting β asset code + Stellar Lumens (https://github.com/stellar/freighter/pull/2884)
v1.20.27
Release Changes
β¨ New features
π Improvements
π Fixes
v1.19.27
feat: surface CAP-71 bound signer address in WalletKit sign flows (https://github.com/stellar/freighter-mobile/pull/901)
Support scanning Stellar address QR codes from account view (https://github.com/stellar/freighter-mobile/pull/892)
fix: default feature flags on for all dev builds, not just DEV (https://github.com/stellar/freighter-mobile/pull/898)
Linearize Send Flow (https://github.com/stellar/freighter-mobile/pull/856)
fix modal view on soroban history first load (https://github.com/stellar/freighter-mobile/pull/880)
chore: bump app version to v1.19.26 (https://github.com/stellar/freighter-mobile/pull/884)
5.42.0
This release contains, among other features/fixes, the addition of Protocol 27 (stellar-sdk v16) support with CAP-71 authorization entries
_New Features_
π : Upgrade to stellar-sdk v16 (Protocol 27) and support CAP-71 auth entries (https://github.com/stellar/freighter/pull/2838)
_Improvements_
:wrench: Linearize the Send flow (https://github.com/stellar/freighter/pull/2764)
:wrench: Sort token pickers by USD value via TokenList (https://github.com/stellar/freighter/pull/2830)
:wrench: Order transactions by date (https://github.com/stellar/freighter/pull/2810)
:wrench: Truncate long memos dynamically (https://github.com/stellar/freighter/pull/2812)
:wrench: Add a CTA letting users know they can paste their mnemonic phrase into the box (https://github.com/stellar/freighter/pull/2803)
:wrench: Set anonymous Sentry user so alerts report users affected (https://github.com/stellar/freighter/pull/2840)
:wrench: Restore submitProduction Sentry secrets fix (https://github.com/stellar/freighter/pull/2819)
v1.19.26
Release Changes
What's new
name*domain.com); it resolves to the recipient account and auto-applies any required memo. (#821)Improvements
changeTrust op now show the asset issuer with a copy button. (#876)Under the hood
5.41.0
5.41.0
What's Changed
v1.18.26
Release Changes
Improvements
Fixes
MainActivity.onCreate crash that fired when Android tried to restore the app from a saved state. Screen reconstruction is now correctly driven by React Navigation rather than Android's fragment manager. (#844)C...) no longer triggers the unfunded-destination warning, since those transfers don't rely on classic account ledger entries. SAC-wrapped classic assets correctly keep the warning. (#827, #836, #842)Under the hood
fmt C++20 consteval compile error triggered by Apple clang 21, and lifts the CI Xcode cap so the latest stable Xcode can be selected again. (#841)v1.17.26
Release Changes
What's new
Improvements
Fixes
Under the hood
5.39.0
5.39.0
What's Changed
v1.16.26
What's Changed
Protocol 26 (https://github.com/stellar/freighter-mobile/pull/820)5.38.3
What's Changed
v1.14.25
What's Changed
Emergency release to fix a crash related to stellar.expert now returning Soroban contract tokens in search results.
Fixes included (https://github.com/stellar/freighter-mobile/pull/801)
asset is a raw contract ID instead of CODE-ISSUER-TYPE. The parsing in useTokenLookup was updated to detect contract IDs and read metadata from the new top-level fields (code, decimals, token_name) with tomlInfo as fallback.findSwapPath that shows "Swapping custom tokens is not supported yet" instead of crashing.v1.13.25
v1.13.25 β What's new
This release focuses on dApp signing capabilities, performance improvements, and bug fixes.
dApp signing
stellar_signAuthEntry support: Freighter now handles the stellar_signAuthEntry method from dApps, enabling authorization entry signing flows via WalletConnect. (#743)Performance
Bug fixes
v1.12.25
New Features
Improvements
Bug Fixes
Maintenance
v1.11.25
Whatβs new
This release focuses on transaction/history UX improvements, token icon reliability, and mobile build + performance updates, plus dependency upgrades.
Transaction history improvements
Token icons & visuals
Discovery / dApp UX tweaks
Build, performance & maintenance
Release 1.10.24
This release fixes the incompatibility with the USDC icon. (https://github.com/stellar/freighter-mobile/pull/655)
v1.9.24
:sparkles: New Features
:hammer_and_wrench: Improvements
react-native dependency from 0.78.0 to 0.81.4:bug: Bug fixes
v1.8.24
:bug: Bug fix
v1.7.24
:sparkles: New Features
:hammer_and_wrench: Improvements
:bug: Bug fixes
v1.6.23
:hammer_and_wrench: Improvements
:bug: Bug fixes
v1.3.23
v1.2.23
:hammer_and_wrench: **Fixes & Improvements**
v1.0.23-(21)
:sparkles: **New Features**
:hammer_and_wrench: **Fixes & Improvements**
v1.0.23
:sparkles: **New Features**
Add Collectibles using contract address and token IDcamera rollBiometrics to unlock wallet and approve transactionsCoinbase on-ramp to easily add funds to your wallet (Android only)Word bubbles for Recovery Phrase verificationVerified token lists to display token iconsQR Code scanning to send payment between Freighter walletsSentry to track errors:hammer_and_wrench: **Fixes & Improvements**
v0.9.23
:sparkles: **New Features**
dApp Transactions and Token search resultsTransaction Details when signing dApp transactions including auth entries detailsdisplayeddummy data for now to illustrate the UI components as the "Add collectible" functionality is not implemented yet:hammer_and_wrench: **Fixes & Improvements**
v0.8.23 (16)
:hammer_and_wrench: **Fixes & Improvements**
v0.8.23 (15)
:sparkles: **New Features**
Deep-link is now available! You should be able to search for "Freighter" on WalletConnect's list of walletsdisconnect from a single dApp on the Connected Apps screensecurity when Adding new Tokens or connecting to dApp domains through Blockaid scanning:hammer_and_wrench: **Fixes & Improvements**
No Internet Connection red banner appearing on every app launchapp logo on all screens including the splash screenwebview cache to ensure users are always seeing latest dApp versionsv0.7.23
:sparkles: **New Features**
in-app browser on the third tab where you can connect and sign transactions from Stellar dApps without leaving the mobile appAmplitude, it should be mimicking all extension eventsnetwork: TESTNET | PUBLICplatform: Android | iOSplatformVersion: Android or iOS OS versionconnectionType: Internet connectivity (wifi, cellular, etc.)appVersion: e.g.: 0.7.23buildVersion: e.g.: 13bundleId: org.stellar.freighterwalletstellar-sdk package has been upgraded to v14.0.0-rc.3 :hammer_and_wrench: **Fixes & Improvements**
+/- signs instead of arrowsstellar-hd-wallet to latest v1.0.2react-native-crypto to latest v2.2.1:bug: Known Issues
Aquarius, Etherfuse, FxDAO, StellarTerm, Soroban Domains and XL MemeNo Internet Connection red banner is briefly appearing on every app launchv0.6.22
:sparkles: New Features
:hammer_and_wrench: Fixes & Improvements
Mainnet instead of TestnetNetwork option even after logging outv0.5.22
:hammer_and_wrench: Fixes & Improvements
swipe up to dismiss toasts. Users can now also hold a toast on screen for as long as they want.Avoid hiding input field with keyboard on "Show recovery phrase" screen.Settings screen when Done is tapped on "Show recovery phrase" screen.input components across the app.capitalize keyboard where it makes sense.portrait orientation modebuy with add since we are not buying XLM but rather adding them from another walletv0.4.22
:sparkles: New Features
:hammer_and_wrench: Fixes & Improvements