From 827909b3227104dcb24fb4b28fda6e808e5048cd Mon Sep 17 00:00:00 2001 From: Cryptoguard Date: Mon, 8 Jun 2026 20:57:24 -0400 Subject: [PATCH 1/2] Update release-notes.md --- doc/release-notes.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/doc/release-notes.md b/doc/release-notes.md index 2b22a69..9eb0767 100644 --- a/doc/release-notes.md +++ b/doc/release-notes.md @@ -1,3 +1,12 @@ +0.16.4 +============== + +- Security: Always require the initiate tx output index and value for secret hash swaps. + - Strengthens the 0.16.3 fix: the amount check can no longer be skipped when the output value is unavailable; the swap is now rejected (fails closed) instead of proceeding. +- Security: Also verify the participate tx output amount for secret hash swaps. +- Raise minimum Python version to 3.11. + + 0.16.3 ============== From 37d564b4f7b75d7576040d44b56370d6356bd921 Mon Sep 17 00:00:00 2001 From: tecnovert Date: Tue, 9 Jun 2026 12:10:16 +0000 Subject: [PATCH 2/2] Update release-notes.md The PTX amount is already checked in getLockTxHeight. Tested in test_run.py, test_10_bad_ptx. --- doc/release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/release-notes.md b/doc/release-notes.md index 9eb0767..980c46e 100644 --- a/doc/release-notes.md +++ b/doc/release-notes.md @@ -3,7 +3,7 @@ - Security: Always require the initiate tx output index and value for secret hash swaps. - Strengthens the 0.16.3 fix: the amount check can no longer be skipped when the output value is unavailable; the swap is now rejected (fails closed) instead of proceeding. -- Security: Also verify the participate tx output amount for secret hash swaps. +- Security: Also double check the participate tx output amount for secret hash swaps. - Raise minimum Python version to 3.11.