Sparrow Wallet releases version 2.5.4 after AI-assisted code review

Sparrow Wallet has released version 2.5.4, an update featuring code corrections identified primarily through an AI-assisted security review. Developer Craig Raw stated that the identified issues did not pose a risk to user funds, but were integrated to enhance software stability and quality.

The update includes several technical improvements aimed at privacy and security. Key changes involve addressing residual DNS leaks when routing connections through Tor to prevent information exposure to internet service providers. The update also implements constant-time ECIES MAC comparisons to eliminate timing-based side-channel attacks.

Additionally, version 2.5.4 improves hardware wallet support for devices such as Ledger, Trezor, BitBox02, and Keycard by adding retry logic for policy registrations. To prevent accidental data exposure, the update also ensures that sensitive information, including Bitcoin Core RPC credentials, is stripped from debug logs.