Solidity: v1.7.0 (Ethereum Mainnet)

solidity/v1.7.0 is the Ethereum mainnet release of the Timelock contract. To further harden the security of tBTC Bridge, we introduce a timelock for the upgradeability of the critical bridge components: Bridge, WalletRegistry, and RedemptionWatchtower. The ownership of ProxyAdmin contracts is transferred from the Threshold Council to the Timelock contract and the Threshold Council becomes the scheduler and executor of the Timelock.

---

The NPM package is available in the NPM registry as @keep-network/[email protected]

---

The commit hash for clean builds is 4859513a53e77467583a96f4267539700e7c2b31.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @pdyraga
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk8SRO9e gN94erb57G43YvY asc2ypx7KtJhJpq tOozFkj38oO4Hac JFUCPemKwMrITIp 8l0Lo2b8LocW64g nvCUWRCi9wkCxQ7 fD71QEOg0wOb9Kc 4blQ9lD1IsuzHCq IV2DSZ1dn3bBnUy PPzdsVwTKhgDbtL y7irdOJNZ2Fib22 wzRiiVRQjmJZrUQ 9fMO60r1yzofgvn Lb6IvsvctPgU0iv . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9aHAu6X NujJUeELjjbe1dB 9zocfFJ3ZydS8gp f1tADuI6k9ZkzxC w14GjitjQlX4Cyj ZqKqeQsXbYXK3N1 ZgaxvtYzNfcMQD2 sLK8bIpkM2Zn3m6 udT3VHAvOSaOqlN 9S8IGeV8R1myCAB c6C740r1yzofgvn Lb6IvsvctPgU0iv . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for this version can be found in the corresponding solidity/v1.7.0 milestone.

Typescript: v2.4.1

typescript/v2.4.1 is a patch release of the TypeScript SDK library for interacting with tBTC v2 smart contracts on the Ethereum chains.

This release introduces the following:

• Improve public key fetching for closed/terminated wallets (#813)
• Fix Bridge contract artifact for Sepolia (#811)

---

The NPM package is available on the NPM registry as @keep-network/[email protected].

---

The commit hash for clean builds is c2a503cb2c2b21ec38b4d758576cffe7e43e9237.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @tomaszslabon
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf7C3Uj6 zlSg8Jh9EHCnRGG 4MF67hT7lcKQFoQ rxUU9JmT5irCF9l 4aREpWewwGdfUeg UbJ2jCHZrc73ywu NxTpumsgjhJSuZR 3okLAkYQ0BHZCgO ygjBQivA5ZQ5592 D0lN7QWG5dD8MZP 8wZcd0Rc7HEJnLg tDoHzY2hZEhkyV5 . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9a4JpxI FiaDLpEhZixHtst s7iP7TLbCS7UtS0 iD52iKfIEpUBC27 DKPExvKzSkXYxqA P8SR01YOc6ea1DI Uiy6IJhYbZz43Lh esVt4gb43cEUo1g OvMeO2pV6nxXG4E b5gDKepy1wW3loq wQ7aJ0Rc7HEJnLg tDoHzY2hZEhkyV5 . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version 2.4.1 can be found in the corresponding typescript/v2.4.1 milestone.

Typescript: v2.4.0

typescript/v2.4.0 is the next release of the TypeScript SDK library for interacting with tBTC v2 smart contracts on the Ethereum chains.

This release introduces the following:

• Support for depositor proxies (#776)
• Experimental support for L2 direct bridging (#798, #808)
• Minor optimizations and fixes (#802, #800)
• Remove support for Goerli testnet (#755)
• Add coinbase data to the SPV proof builder (#773)
• Update contracts artifacts (#809, #777)

---

The NPM package is available on the NPM registry as @keep-network/[email protected].

---

The commit hash for clean builds is f16fe1395b46d3b76801f8b430b5b8381301bb8b.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @tomaszslabon
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf72JmyC T7tbU043yG6cF0C rifS8Z6ITDXtEtH AFQ8TDW4GUQkgM4 fdbzqD4LeIS5J6v HjcrEQoR4pHNyEq ispn4wvZ4aEnGQK Nig3d8yy6luCIzE qxv9SZtbHIkK7SC ccYSEHXIExxpERM 0quKW0oxIf0Qu5u Jpp5XnBvLERhN6w . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9aoRIVm p8zbXi558t8jPKJ hpmdaPzUr3epkhx aDPSmpsAh8x5yVL svq8FKiBXEsILJL j2LXcJq2WWHswNW nKInhXN7ZyRS3SZ v172ygsRz5eN4ln mcnEQHWsCwZKAfN T10PDUuC6PzuBDS O2vhw0oxIf0Qu5u Jpp5XnBvLERhN6w . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version 2.4.0 can be found in the corresponding typescript/v2.4.0 milestone.

Solidity: v1.6.0 (Mainnet)

The solidity/v1.6.0 release adds new features to the tBTC v2 protocol. Specifically:

• Introduces the new redemptions veto mechanism (#781)
• Enables support for deposits with 32-byte extra data (#749)
• Exposes the AbstractTBTCDepositor contract (#778)

The NPM package is available in the NPM registry as @keep-network/[email protected].

---

The commit hash for clean builds is 240d3d0b54234aa45dbfb36a5c4d0bc66a0a6443.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @tomaszslabon
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf6qmhaL YogxW4bqXackkma R9HsjPDQ4j1kdmE EI4Cce9Lzv8MZM3 iDYeyTinOJwTvMw HWjCGzXJy6kKast Vq8i9pZZN80eiK6 8kLIqjRDkjvLFvk ls2QeMWrUCYnm5r CD7OuhuH3Vo0nhJ 1Iv3r0SDRJt1oMi sViJfnf3kuPpxUB . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9ati1iX bF88QAMkuIe8XoU pprSD6VM55sPG6j iXryAWRZpKC8CtB 50drKT41Qwbah2b Wz4gVEhb7kMK4zw P1StowKNMZ97OcN TNk2lFulzuS7ypn MUH6MgBhPhZJW9x S8PGmIhKxPO4X6Y NvBND0SDRJt1oMi sViJfnf3kuPpxUB . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version solidity/v1.6.0 can be found in the corresponding solidity/v1.6.0 milestone.

Solidity: v1.5.2 (Mainnet)

solidity/v1.5.2 is the release of a security fix, related to SPV Merkle proof malleability, described in the GHSA-wg2x-rv86-mmpx security advisory.

The NPM package is available in the NPM registry as @keep-network/[email protected].

---

The commit hash for clean builds is ee6616488fb9d74ed2d04811bf625206ea6c70d0.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @tomaszslabon
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf7SjIcX TsLlXMxZhPpHsd2 w9iDWuEjld3uBPG nLSK4zBYHc0qdso ToxcxGf3za6l0gz gAILHT0gdW4m0MS AK2EIxWpk0urmbC lAo0l3S0oPaIPb9 iRSohVth9kiwhcf JO0ugI2wv4PMfgh QPfXU0PWZkNdVGp 0ZZQhCBRNk0KgZk . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9a3DyjT Up5IXewCVtXM0iw QVvIF76UbP35VK2 g2VHQ1EjDsWYYnt 0sxcDrDSXYU9mBp mMpgQsp5wBwwned qPAYtW8kJsZru8K s5bAw6hgmFwqyE7 3op0R5f9JHTqH4H nT9a8OTqc9mn7pl GuP4y0PWZkNdVGp 0ZZQhCBRNk0KgZk . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version solidity/v1.5.2 can be found in the corresponding solidity/v1.5.2 milestone.

Typescript: v2.3.0

typescript/v2.3.0 is the next release of the TypeScript SDK library for interacting with tBTC v2 smart contracts on the Ethereum chains.

This release introduces the following:

• Support for the new tBTC testnet on Ethereum Sepolia
• Support for Ledger Live applications, introduced in the form of an Ethers signer that leverages Ledger Wallet API to sign transactions issued by the SDK
• Additional unit tests increasing overall coverage of the SDK functions
• Fix for a bug related to amount conversion that was causing problems while looking for wallets available to handle the redemption.

---

The NPM package is available on the NPM registry as @keep-network/[email protected].

---

The commit hash for clean builds is 7ceee542a292ac811c267eca2991379c14331220.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @michalsmiarowski
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7SMgAL 5NY1277Utw5mA8i 1L9QkD7NpCS6kJU UaLrqKt0dBCfZkQ zSyVgCWYuGUjnj4 ttOsnbjF0hU9wnD mxo6dWU7HaSZnnC Ni6TLlGbncLlets KPlCKrMMkwqduns CgqfRlPWk8C8DsM MXWhPDyawYkQ8DV eMw0sLipLBn57dM 7tAWziO9dONnaft AfJUT0pZ7pmEEx4 rMmMuh3aDIDcra4 . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9ZsEpk9 yB1rsNO90ccuMPr BxbaEvPQsAbK8wx vk4glpvWcSaBk7h zvlHDNeLQAwHjE2 dOlEA9CCozQ3zom 5rl1TWsM08PcyMH E9kITB6TjEp0bZt WRqqjL9Ez57m7EB K0i0dDz9kymIjN0 jFvSX0pZ7pmEEx4 rMmMuh3aDIDcra4 . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version 2.3.0 can be found in the corresponding typescript/v2.3.0 milestone.

Typescript: v2.2.0

typescript/v2.2.0 is the next release of the TypeScript SDK library for interacting with tBTC v2 smart contracts on the Ethereum chains.

This release includes:

• Improvements around SDK documentation (README and API reference)
• Hardened wallet main UTXO lookup logic (used while determining wallets for redemptions)
• Change of the WASM-based tiny-secp256k1 library to a pure JS @bitcoinerlab/secp256k1 library to facilitate integration for browser-based clients
• Fix for the code recognizing chain ID based on the provided signer

---

The NPM package is available on the NPM registry as @keep-network/[email protected].

---

The commit hash for clean builds is fdcb4490aee837b8f09912b03195c781547b9538.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @kpyszkowski
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkVwb4bx Zo0cOQ6HAJXFJxd OUJ4CH6j8wEa6Bh TI90dExn4LarBzJ NlS3c7N4Fjgj8Zn trebGZbf4SpQcdf YMJXbC4lDPkDGsD Je2XQKmO1Jox49M 86bTWztISlmKHTm M1WhHFbJMBlce0D lrl5Ce3euzvKEkj tObO8FQEVUxNQBV RgaR5zGNl9nJdz0 gzcPK0ownUkfqP4 xTcx1SwrpTjPjei . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9Zs9vK8 uela0Le626g2v3L hD9pFGWFqL16OEc EL8CqB1BvpFLinv CTz9VqnR71C9rnw 1mraxSQNAJtvPRW JgEqgrlSpIYo2TM UY6omyyk72UdWkW 8Ye3543GSXc5h03 A4XXUkTxV8Dcz8v 35IV00ownUkfqP4 xTcx1SwrpTjPjei . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version 2.2.0 can be found in the corresponding typescript/v2.2.0 milestone.

Typescript: v2.1.0

typescript/v2.1.0 is the next release of the TypeScript SDK library for interacting with tBTC v2 smart contracts on the Ethereum chains.

This release introduces some improvements (e.g. enhanced Bitcoin address validation, better support for hexadecimal types) and some bug fixes around contract artifact resolution.

---

The NPM package is available on the NPM registry as @keep-network/[email protected].

---

The commit hash for clean builds is a4d56bc9986e7c54e106ac0f96e8b610040961b3.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @kpyszkowski
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkVwb4bx Zo0cOQ6HAJXFJxd OUJ4CH6j8wEa6Bh TI90dExn4LJTs8Y RCAzRTYFDHzYCQF TCRsCun01wV6zUK NX4vbm9dHIDczwm cBTACGog7XitPqe HhCzU8edCsRBrTv mv6pEmOVXLiQ22f MaZpDG5T1n2lgb1 8yBENxsa3peVWJu m5zPlGQ88BJNPfE 9wQLb0P72qRqkTv cz9YHrTLK74702F . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9aoIfpe 9Fr2UCnTBpq2xy2 MHDsJ46a6xufe3F hmZGGgnExAtelhf Q5nqLF5MoFd78zB KfITkPoaS8pLSZK gzfCn681NUx0hz4 iBFIjWTOe41MWCH eTOe3r8oCdx7M9H Ne1eiVu0hPkA3OP qypzH0P72qRqkTv cz9YHrTLK74702F . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version 2.1.0 can be found in the corresponding typescript/v2.1.0 milestone.

Solidity: v1.5.1 (Mainnet)

solidity/v1.5.1 is the release of the L2WormholeGateway's security fix, described in the GHSA-54q9-r92x-944r security advisory.

The NPM package is available in the NPM registry as @keep-network/[email protected].

---

The commit hash for clean builds is 7d3c8da8a47ecb215df97b404f48bf9aaac6fb11.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @tomaszslabon
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf8PNqlM s0ol2A96VMe8uio Q54UC7A0h7EJiUF AlI1oENriP0SlUQ 6cSHoVJRDqWuxlv cQkjDXJkgLx3ZFo xlIVLiOlkwY5fJh XDnM4cA4tbAJDWs sfAefj04PvBoCjd lpRNBIUYZjeOx9f W6OEk0R4wKVNFpL zf7GOubbWexVWEL . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9b7OhCF STAJGboWCKalM62 OeHjrXaiB14hTuZ lAP4pdIDjnpQc7l tC97bbruRaoGWcg he3iwpP8dM9H3qd QjTGcbFYTPQcFFZ EwhSnUv677CUY01 Qod53ayEWX5rw0q Goq20FuyGUjjbMc jXRGE0R4wKVNFpL zf7GOubbWexVWEL . END KEYBASE SALTPACK SIGNED MESSAGE.

Cross-chain/polygon: v1.0.2

The release of cross-chain/polygon/v1.0.2 provides a fix to L2WormholeGateway implementation contract to mitigate the problem described by the GHSA-54q9-r92x-944r security advisory.

L2TBTC and L2WormholeGateway proxy contract addresses remain the same:

• L2TBTC: 0x236aa50979D5f3De3Bd1Eeb40E81137F22ab794b
• L2WormholeGateway: 0x09959798B95d00a3183d20FaC298E4594E599eab

The new L2WormholeGateway implementation contract address is 0x04671c72aab5ac02a03c1098314b1bb6b560c197.

The NPM package is available in the NPM registry as @keep-network/[email protected]

---

The commit hash for clean builds is f0c3418026eeddb99262ca8859470a71b427c774.

Signatures of commit hash from the development team (verified in the Keybase app):

• @tomaszslabon
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf7d5WOu xsxj9HbQGAwjVSx wY9XpvBQD4QMHZK BDyHFLiCiHzZHKQ rz5qwvkQ6eR0qu7 amQLEZpz6wGfTWU kVIFoP6xdBQIQu1 N5LbCGGLszQalYq aTteiGYyZ4O0yVD oHVdduVr17El2QM nRnRR0TAd3EeWTJ pmnybeMatxJ5dkC . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9aFmV3F NDAWLD4pYc00qpj vdIFWJS8z9WaxdL lcCPAjADVFR9rWD Fjlk9EFE7Eq1xt1 iDsxvVa9Gty6NZB i384hnzjrEzs1C0 cgKU6IBjowOMfUA HgWwmAnFo2duHZ5 uE47iWnEiES9uGB G0Kh70TAd3EeWTJ pmnybeMatxJ5dkC . END KEYBASE SALTPACK SIGNED MESSAGE.