Bisq: baixar versions anteriors

Release notes
This important security update fixes vulnerabilities identified during our recent security audit and includes the latest Tor security release.
Updating to this version is required to continue trading.

Trading and Payments
- The API prevents payment-started confirmation before seller payment details arrive.
- Revolut account details use the Revtag identifier.
- Offer republishing waits for P2P bootstrap to complete.

Reliability
- Trusted BSQ block providers are initialized once, including when the configured list is empty.
- Bank account input validation runs before country-dependent fields are cleared.

BSQ Swaps
- Validate BSQ swap inputs and signatures at both sides of the trade, including outpoint binding and duplicate input checks.

Tor
- Update to Tor 0.4.9.13.

Installation

macOS
Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:
<img src="https://github.com/user-attachments/assets/e058c34c-38f5-4329-8fc5-f48b3f2ba4dd" width="180"/>
Grant permissions by:
- run sudo xattr -rd com.apple.quarantine /Applications/Bisq.app in a terminal (type Terminal in the Apple search box)
- open Bisq again
More details can be found here.

Windows
For similar reasons you will get that warning at Windows: Windows protected your PC
- Click the More info button when prompted
- Click the Run anyway button when prompted
More details can be found here.

Verify download
See the verification and installation instructions in the Bisq Wiki.

Release notes
This is an important security update that fixes vulnerabilities identified during our recent security audit.
Updating to this version is required to continue trading.

Security
- Refund payouts require validated escrow evidence and authenticated claimant/agent authorization.
- Replayed refund receipts and cross-chain payout reservations are blocked.
- Refund transaction provenance, finality, receiver outputs, and transaction IDs are validated.
- Burning Man proposal inputs and address-list resources fail closed when invalid or obsolete.
- DAO readiness is revoked after checkpoint failure, and BSQ swap signatures require exact publication handoffs.
- Update to latest tor version

Trading
- Altcoin amounts honor registered precision and zero-rounded amounts are rejected.
- Deposit liveness handling uses broadcast evidence and configured explorer scope.
- Withdrawals complete after commit, obsolete mediation results are ignored, and unknown BTC fee receivers are rejected.
- Security deposits remain editable down to the minimum floor.

Reliability and Builds
- Shutdown sequencing is safer across JavaFX, network, Tor, broadcaster, and desktop components.
- Store checks avoid copying the full store.
- Reproducible Debian packaging, Docker builds, Gradle configuration cache, and Gradle 9.0.0 support are included.

Installation

macOS
Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:
<img src="https://github.com/user-attachments/assets/e058c34c-38f5-4329-8fc5-f48b3f2ba4dd" width="180"/>
Grant permissions by:
- run sudo xattr -rd com.apple.quarantine /Applications/Bisq.app in a terminal (type Terminal in the Apple search box)
- open Bisq again
More details can be found here.

Windows
For similar reasons you will get that warning at Windows: Windows protected your PC
- Click the More info button when prompted
- Click the Run anyway button when prompted
More details can be found here.

Verify download
See the verification and installation instructions in the Bisq Wiki.

This is a hotfix release based on v1.10.6. The v1.10.5 release contained corrupted dao datastores that lead to failed trades.

This is a hotfix release based on v1.10.5. The last release contained a bug that lead to failed trades.

Release notes
This is an important security update that fixes vulnerabilities identified during our recent security audit.
Updating to this version is required to continue trading and using BSQ and the Bisq DAO.

DAO and Network Integrity
- Canonical hash/signature encodings reduce ambiguity across DAO and P2P payloads.
- DAO block signatures, trusted providers, lite-node checks, checkpoints, and payload hash commitments are strengthened.
- BSQ block bridge delivery requires contiguous state and recovers gaps.
- Malformed decrypted votes are isolated per voter, while malformed merit can no longer remove a majority-committed blind vote.
- Proposal validation is consistent across startup and live nodes and applies to the entire activating cycle.

Reputation and Bonded Roles
- Account-age and signed-witness bridge validation is bound to ownership and trusted witness chains.
- Bonded-role registrations and lockups are checked against the correct proposal and collateral lifecycle.
- Merit issuance and Burning Man accounting receive additional integrity checks and refreshed release data.

Trading and Messaging
- Fiat buyer-account validation, deposit/DPT binding, support-message authentication, and dispute-agent authentication are hardened.

Credits to reporters of vulnerabilities
- https://github.com/Kevandrew
- https://github.com/stejbac
- https://github.com/woodser

Installation

macOS
Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:
Grant permissions by:
- run sudo xattr -rd com.apple.quarantine /Applications/Bisq.app in a terminal (type Terminal in the Apple search box)
- open Bisq again
More details can be found here.

Windows
For similar reasons you will get that warning at Windows: Windows protected your PC
- Click the More info button when prompted
- Click the Run anyway button when prompted
More details can be found here.

Verify download
See the verification and installation instructions in the Bisq Wiki.

Release notes
This is an important security update that fixes vulnerabilities identified during our recent security audit.
Updating to this version is required to continue trading. BSQ Swaps have also been re-enabled.

Security
- DAO block signatures: DAO blocks received from the network can now be signed by trusted BSQ block providers. Bisq verifies these signatures before accepting the blocks.
- Blind-vote validation: Bisq rejects blind votes whose encrypted payload does not match the on-chain commitment, and decrypts vote results only from the ballots that match the majority hash.
- Dispute-opening validation: New dispute cases are validated before being accepted. Disputes that fail validation are rejected.
- Arbitrator-witness signatures: Signed witness records are now checked for valid DSA signatures before being used for account aging.
- Seed-only data filtering: Network data that is intended to come only from seed nodes is now rejected when received from non-seed peers.
- Price-zero offer rejection: Offers with a price of zero are rejected and not added to the offer book.
- Burning Man fee routing: The Burning Man distribution address list is now used when selecting BTC fee receivers.
- Trusted seeds: Trusted seed nodes are used during network bootstrap.

Other changes
- Alert authors can remove all alerts they created.
- Legacy arbitrator data has been removed from trade and deposit flows.

Installation

macOS
Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:
Grant permissions by:
- run sudo xattr -rd com.apple.quarantine /Applications/Bisq.app in a terminal (type Terminal in the Apple search box)
- open Bisq again
More details can be found here.

Windows
For similar reasons you will get that warning at Windows: Windows protected your PC
- Click the More info button when prompted
- Click the Run anyway button when prompted
More details can be found here.

Verify download
See the verification and installation instructions in the Bisq Wiki.

Release notes
This is an important security update that closes several gaps in trade protocol validation, message authentication, and filter safety identified during our ongoing security audit.

Filter Safety
- Filter-provided added BTC nodes and seed nodes are disabled because those fields are not currently covered by the filter signature.
- Previously persisted filterProvidedBtcNodes and filterProvidedSeedNodes config values are ignored on startup.
- Filter-provided BTC fee receiver addresses are temporarily ignored; DAO donation addresses and Burning Man receiver addresses remain active.

Trade And API Safety
- The Core API rejects payment-start confirmation for trades that are already failed.
- Buyer-side deposit/DPT processing checks that the peer deposit transaction matches the local transaction before wallet or trade-state mutation.
- Delayed payout transactions must spend output zero of the matching deposit transaction.
- Stale deposit confirmation callbacks are ignored when they refer to an older deposit transaction.

Message Authentication
- Trade chat and ACK messages must be signed by the expected trade peer.
- Dispute opening messages must be signed by the declared dispute opener.
- Peer-opened dispute and dispute-result messages must be signed by the locally expected mediation, or refund agent.
- Invalid messages are ignored before dispute, chat, or persistence state is mutated.
See full release notes at: https://github.com/bisq-network/bisq/tree/release/v1.10.3/release-notes/1.10.3

Installation

macOS
Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:
Grant permissions by:
- run sudo xattr -rd com.apple.quarantine /Applications/Bisq.app in a terminal (type Terminal in the Apple search box)
- open Bisq again
More details can be found here.

Windows
For similar reasons you will get that warning at Windows: Windows protected your PC
- Click the More info button when prompted
- Click the Run anyway button when prompted
More details can be found here.

Verify download
See the verification and installation instructions in the Bisq Wiki.

This release addresses concerns about the overly restrictive trade amount limits introduced in the previous release and fixes a bug affecting BSQ swap trades.
Release notes

DAO Consensus Security
- DAO merit validation is hardened at and after block 954_200.
- V2 merit validation checks embedded merit issuances against DAO state compensation issuances, verifies signatures, ignores future merit, and prevents duplicate issuance tx IDs from contributing more than once.
- Legacy merit behavior remains in place before block 954_200 for historical replay compatibility.

Arithmetic Hardening
- DAO consensus arithmetic is height-gated: legacy arithmetic before block 954_200, exact V2 arithmetic at and after activation.
- Exact arithmetic is applied to proposal quorum and threshold calculations, vote-result stake aggregation, majority-hash stake totals, issuance sum checks, and V2 weighted merit calculations.
- A zero total-stake majority hash case is now rejected before division.

DAO Results And Tests
- DAO result display calculations now use the result-phase height.
- The cycle accepted-vote count now uses accepted votes instead of active votes.
- Regression tests cover merit validation, activation boundaries, DAO arithmetic, proposal vote results, vote-result consensus, vote-result service aggregation, and legacy versus V2 weighted merit.

Installation

macOS
Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:
Grant permissions by:
- run sudo xattr -rd com.apple.quarantine /Applications/Bisq.app in a terminal (type Terminal in the Apple search box)
- open Bisq again
More details can be found here.

Windows
For similar reasons you will get that warning at Windows: Windows protected your PC
- Click the More info button when prompted
- Click the Run anyway button when prompted
More details can be found here.

Verify download
See the verification and installation instructions in the Bisq Wiki.

This release addresses concerns about the overly restrictive trade amount limits introduced in the previous release and fixes a bug affecting BSQ swap trades.
Release notes

Trading And Wallet Safety
- Maximum trade limits were increased to 0.250 BTC.
- The risk-based reduction factors for the 4 risk classes were changed from 1, 2, 4, 8 to 1, 2, 3, 4. This results in trade limits of up to 0.250 BTC for Altcoins and up to 0.0625 BTC for higher-risk fiat payment methods such as SEPA or Zelle.
- Fixed a bug in BSQ swap fee validation and added additional validation checks.
- Trade statistics validation was adjusted for the reduced trade limits introduced in the previous release.

UX And Settings
- Updated the user agreement.
- Trade rules are now shown when users create or take an offer for the first time.
- Trade rules and the user agreement are now available from Settings → About.
- The cold-storage reminder threshold is now configurable in preferences.

Release Process And CI
- Debian package dependency generation now relaxes t64 dependencies while preserving the original constraint or qualifier on the non-t64 alternative.
See full release notes at: https://github.com/bisq-network/bisq2/tree/main/release-notes/2.1.11

Installation

macOS
Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:
Grant permissions by:
- run sudo xattr -rd com.apple.quarantine /Applications/Bisq.app in a terminal (type Terminal in the Apple search box)
- open Bisq again
More details can be found here.

Windows
For similar reasons you will get that warning at Windows: Windows protected your PC
- Click the More info button when prompted
- Click the Run anyway button when prompted
More details can be found here.

Verify download
See the verification and installation instructions in the Bisq Wiki.

Bisq 1.10.0 follows the recent security incident with a focused hardening release that improves trade protocol security, network message validation, release verification, and hardening against supply chain attacks.
A detailed post-mortem covering the incident, investigation, impact assessment, and the security improvements introduced with this release will be published in the coming days on the Bisq webpage.
Note: As this release adds support for both Intel and Apple Silicon macOS binaries, the in-app download for macOS binaries will not work for this release. Please download, install, and verify the macOS binaries manually.
Release notes

Security Improvements
- Hardened validation of trade protocol messages, deposit transactions, payout transactions, trade contract data, and peer-provided wallet data.
- Improved protection against supply chain attacks by adding PGP signature verification to dependency resolution.
- Updated Java, JavaFX, Tor, bitcoinj, and other dependencies to their latest stable versions.
- Improved the build process with additional verification of the build toolchain.
- Added Docker-based DAO and end-to-end trade tests to GitHub Actions. This work will continue over the coming weeks.

Security Improvements Affecting the Trading Experience
- The maximum trade amount is now limited to 0.125 BTC.
- Offers and trades are now restricted to a maximum price deviation of 25%.
- Disabled XMR auto-confirmation. No issues have been identified, but a more in-depth security audit is planned for this area.
- Removed the webcam library used for QR code scanning to reduce security risks. A more secure replacement will be introduced in the next release.
- Removed dispute chat attachments and dispute log file transfers for security reasons.
- Added a popup reminder advising users not to use the Bisq wallet as a long-term storage wallet when holding higher balances.

UX
- Improved performance by updating JavaFX and Java versions.

Deployment
- macOS releases now support both Apple Silicon and Intel-based Macs.
- The reproducible build system is now partially in place, though not yet applied to this release. The next release will fully benefit from it.

Installation

macOS
Bisq does not use Apple's notarization process (see why).
For that reason you will see that (misleading) alert:
Grant permissions by:
- run sudo xattr -rd com.apple.quarantine /Applications/Bisq.app in a terminal (type Terminal in the Apple search box)
- open Bisq again
More details can be found here.

Windows
For similar reasons you will get that warning at Windows: Windows protected your PC
- Click the More info button when prompted
- Click the Run anyway button when prompted
More details can be found here.

Verify download
See the verification and installation instructions in the Bisq Wiki.

This is a hotfix release that applies the upstream BitcoinJ fix for the chainwork bug. The bug caused Bisq to stall at block height 928,895 because the field used to store the accumulated proof of work was too small. Henrik Jannsen, who is the release manager for Bisq 2, will now also be added as a release manager for Bisq 1.
If you experience any wallet-related issues, you may perform an SPV resync, although this should not be necessary.

Some users aren't getting enough connections to the bitcoin network and can't therefore broadcast transactions. This hot-fix release resolves these connectivity issues and improves the reliability of the network.
See https://github.com/bisq-network/bisq/milestone/87?closed=1 for more details.

Credits
Thanks to everyone who directly contributed to this release:
- @alejandrogarcia83
- @alvasw
- @devinbileck
- @Emzy
- @gabernard
- @HenrikJannsen
- @jmacxx
- @stejbac
- @wiz
A special thanks to our first time contributors:
- @runbtc
As well as to everyone that helped with translations on Transifex.
https://transifex.com/bisq/bisq-desktop

Major Changes:
- Improve network resilience and stability
- Add getdaostatus API, expose failed trades in API, and support XMR auto conf in API
- Buyers can pay using SEPA QR codes
- Restore QR code scanner for mobile notification app pairing

Improvements
- Update seenodes [1], [2], [3], [4], [5]
- Update Bitcoin nodes [1], [2], [3]
- Support dynamic Bitcoin node and seednode registration [1], [2], [3], [4]
- Add getdaostatus API
- Expose failed trades in gettrades API
- Show SEPA QR Code to buyers
- Add API for payment started with XMR auto conf params
- Replace Keybase admin by Community admin in DAO
- Improve maximum allowed network requests [1], [2], [3]
- Restore QR code scanner feature for mobile notification pairing
- Speed up bond repository update
- Improve logging
- Improve export account reputation process for bisq 2
- Hide offers which are over the trade limit
- Add luis3672's mediaton onion address

Bug fixes
- Optimize memory use in Dispute multiple holder name detection
- Remove broken BSQ explorer
- Fix data race in BurningManAccountingStore
- Fix data race in IgnoredMailboxMap

Credits
Thanks to everyone who directly contributed to this release:
- @alejandrogarcia83
- @alvasw
- @alyokaz
- @gabernard
- @HenrikJannsen
- @jmacxx
- @napoly
- @rodvar
A special thanks to our first time contributors:
- @alyokaz
- @rodvar
As well as to everyone that helped with translations on Transifex.
https://transifex.com/bisq/bisq-desktop

Major Changes:
- Bisq tells you the reason why an offer was disabled
- We added more currencies to Wise and a holder name is required for new accounts
- Pix accounts requires a holder name for new accounts
- MoneyBeam accounts requires a holder name for new accounts
- Failed and closed trades can be mediated now
- New BSQ market cap chart

Improvements
- seednode: Install openjdk-11-jdk from OS repository
- Refactor & simplify fee service
- Change burning man capping algorithm
- Rename TransferWise to Wise, add more currencies, and add holder name (required for new accounts)
- Add holder name to Pix payment accounts
- Display the reason for auto-disabling an open offer
- Create GetBlocksRequestHandler's reply list once
- Show unconfirmed transaction popup 24h after trade start and add resync button
- Add holder name to MoneyBeam payment accounts
- Allow mediation of failed and closed trades
- Update 'reason for payment' warning instructions (use account name or non-descriptive, e.g., '-')
- Add BSQ market cap chart

Bug fixes
- Fix inconsistent deviation in portfolio offers & history
- Fix initial data request handling
- Detect and handle corrupted SPV state allowing user-initiated resync
- Fix potential NPE in persistence of Contract
- core: Don't add old filter to invalid filters if new signer banned
- Bugfix: avoid standby mode should adhere to the user preference setting
- Fix fee check crash on invalid JSON response [1], [2], [3]

Development & Documentation
- Remove price node and seed nodes from wiz
- Remove outdated commands from finalize script
- gradle-plugins: Use embedded Kotlin compiler
- Remove JDK Enforcements [1], [2]
- Remove 2 of wiz's Bitcoin nodes
- Fix resource path URL decoding in tx validator tests and clean similar tests

Improvements
- Improve flow in create/take offer process
- Add MercadoPago payment method
- Add info popup about Argentinian Peso (blue) market prices
- Update to latest Java 11 LTS runtime (1, 2, 3, 4)
- Show Amazon gift card country in offer book
- Randomly select dispute agent
- Update mediators onion addresses
- Add Bisq 2 bond roles names
- Broadcast Arbitration DPT and dispute message in parallel
- Allow arbitration tickets to be manually reopened
Bug fixes
- Validate transactions after DAO state is ready
- Fix: BTC maker/taker fee validation
- Edit button/pen symbol stops working for altcoin offers
- Fix cutoff UTXOs in Send Funds screen
- Remove unused dependency on Pricenode metadata strings
- @alejandrogarcia83
- @alvasw
- @alyokaz
- @gabernard
- @HenrikJannsen
- @jmacxx
- @napoly
- @rodvar
- @alyokaz
- @rodvar

Improvements
- Allow cloning offers (with different price, payment method, currency, and trigger price) while sharing its maker fees and security deposits
- Don't process burningman accounting data by default
- Speed up burningman and statistics view loads
- Allow dispute agent to resend PeerOpenedDisputeMessage to non-resposive peer
- Prefer Burningmen's custom receiver address
- Burningman Accounting: Show total fees and total DPT
- Remove Burningman activation code (1, 2)
- Add gettransactions method to API
- getoffers (API): Return all offers instead of the only ones with a matching accounts
Bug fixes
- Add SEPA Payment Account country: GI (Gibraltar)
- Allow leniency of 50% when validating trade fees.
- Increase fee limit for accounting data filter.
- Remove "Your computer was asleep" popup
- Remove one seednode from Wiz
- Update wiz's Bitcoin nodes clearnet IP
- Move to portfolio when clicked close in popup
- Fix NullPointerException when sorting columns with blank entries
- Use new burningman accounting file recreated from scratch.
Development & Documentation
- Gradle version catalog: Fix broken gson version enforcement
- GitHub Actions: Enable Gradle Build Scans
- GitHub Actions: Run on all branches
- Update GitHub Actions: checkout (1, 2), gradle-build
- Add bisq2 Gradle Tor Plugin
- Migrate to JUnit 5 (1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 11)
- @alejandrogarcia83
- @alvasw
- @Emzy
- @gabernard
- @helixx87
- @HenrikJannsen
- @jmacxx
- @napoly
- @ripcurlx
- @sqrrm
- @stejbac
- @wiz
- @yonson2023
- @helixx87
- @napoly

Improvements
- Always include high prio payload in get data response
- Seednode improvements for monitoring
- Distribute seednode restart times evenly
- Reduce log level of two messages which frequently fill user's log.
- Warn user when free disk space is too low.
- Do not start new retry with new provider timer if one is still running.
- Maker check DAO health when handling OfferAvailabilityRequest.
- Speed up loading and scrolling of trade history
- Limit offer min/max amount deviation to 50%.
Bug fixes
- Reset pending trade protocol of same offer
- Fix problem causing multiple offers with same ID.
- Increase capacity for thread pool queue at ExportJsonFilesService
- Validate BSQ fee payment using DAO tx info.
- Fix trade fee validation with new BM
- Fix row count number filtering in trade lists
- Remove clearnet address for BTC node "devinbtcyk"
- Fix: RA - Payout is done before Tx validation.
- Fix: Available funds cannot be used for trading until prior trade moved to closed.
- Differenciate offer removal pop-ups for BSQ swaps and regular trades.
- Connection: Close protoOutputStream before closing socket
- Fix withdrawal fee calculation & the min relay fee problem.
- National bank transfer (BSB code not copying)
- Several threading improvements and fixes: 1, 2, 3, 4, 5
- Fix: Wallet Date input field marches across the screen
- Fix: Offers with invalid maker fees are shown live on the Bisq offer book resulting in failed trades and lost fees for the taker
- Add missing segwit BSQ keychain path to wallet info
- Whonix only: Bind/listen on 0.0.0.0 instead of 127.0.0.1
Development & Documentation
- Cleanup Gradle build files: 1, 2, 3, 4
- @alejandrogarcia83
- @alvasw
- @devinbileck
- @gabernard
- @ghubstan
- @HenrikJannsen
- @jmacxx
- @ripcurlx
- @sqrrm
- @stejbac
- @yonson2023
- @yonson2023