xmr-btc-swap/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Added

• Printing the deposit address to the terminal as a QR code. To not break automated scripts or integrations with other software, this behaviour is disabled if --json is passed to the application.
• Configuration setting for the websocket URL that the ASB connects to in order to receive price ticker updates. Can be configured manually by editing the config.toml file directly. It is expected that the server behind the url follows the same protocol as the kraken websocket api

Fixed

• An issue where the ASB gives long price guarantees when setting up a swap. Now, after sending a spot price the ASB will wait for one minute for the CLI's to trigger the execution setup, and three minutes to see the BTC lock transaction of the CLI in mempool after the swap started. If the first timeout is triggered the execution setup will be aborted, if the second timeout is triggered the swap will be safely aborted.

Removed

• The websocket transport from the CLI. Websockets were only ever intended to be used for the ASB side to allow websites to retrieve quotes. The CLI can use regular TCP connections and having both - TCP and websockets - causes problems and unnecessary overhead.

0.7.0 - 2021-05-28

Fixed

• An issue where long-running connections are dead without a connection closure being reported back to the swarm. Adding a periodic ping ensures that the connection is kept alive, and a broken connection is reported back resulting in a close event on the swarm. This fixes the error of the ASB being unable to send a transfer proof to the CLI.
• An issue where ASB Bitcoin withdrawal can be done to an address on the wrong network. A network check was added that compares the wallet's network against the network of the given address when building the transaction.

0.6.0 - 2021-05-24

Added

• Cancel command for the ASB that allows cancelling a specific swap by id. Using the cancel command requires the cancel timelock to be expired, but --force can be used to circumvent this check.
• Refund command for the ASB that allows refunding a specific swap by id. Using the refund command to refund the XMR locked by the ASB requires the CLI to first refund the BTC of the swap. If the BTC was not refunded yet the command will print an error accordingly. The command has a --force flag that allows executing the command without checking for cancel constraints.
• Punish command for the ASB that allows punishing a specific swap by id. Includes a --force parameter that when set disables the punish timelock check and verifying that the swap is in a cancelled state already.
• Abort command for the ASB that allows safely aborting a specific swap. Only swaps in a state prior to locking XMR can be safely aborted.
• Redeem command for the ASB that allows redeeming a specific swap. Only swaps where we learned the encrypted signature are redeemable. The command checks for expired timelocks to ensure redeeming is safe, but the timelock check can be disable using the --force flag. By default we wait for finality of the redeem transaction; this can be disabled by setting --do-not-await-finality.
• Resume-only mode for the ASB. When started with --resume-only the ASB does not accept new, incoming swap requests but only finishes swaps that are resumed upon startup.
• A minimum accepted Bitcoin amount for the ASB similar to the maximum amount already present. For the CLI the minimum amount is enforced by waiting until at least the minimum is available as max-giveable amount.
• Added a new argument to ASB: --json or -j. If set, log messages will be printed in JSON format.

Fixed

• An issue where both the ASB and the CLI point to the same default directory xmr-btc-swap for storing data. The asb now uses xmr-btc-swap/asb and the CLI xmr-btc-swap/cli as default directory. This is a breaking change. If you want to access data created by a previous version you will have to rename the data folder or one of the following:
  1. For the CLI you can use --data-dir to point to the old directory.
  2. For the ASB you can change the data-dir in the config file of the ASB.
• The CLI receives proper Error messages if setting up a swap with the ASB fails. This is a breaking change because the spot-price protocol response changed. Expected errors scenarios that are now reported back to the CLI:
  1. Balance of ASB too low
  2. Buy amount sent by CLI exceeds maximum buy amount accepted by ASB
  3. ASB is running in resume-only mode and does not accept incoming swap requests
• An issue where the monero daemon port used by the monero-wallet-rpc could not be specified. The CLI parameter --monero-daemon-host was changed to --monero-daemon-address where host and port have to be specified.
• An issue where an ASB redeem scenario can transition to a cancel and publish scenario that will fail. This is a breaking change for the ASB, because it introduces a new state into the database.

Changed

• The ASB's --max-buy and ask-spread parameter were removed in favour of entries in the config file. The initial setup includes setting these two values now.
• From this version on the CLI and ASB run on mainnet by default! When running either application with --testnet Monero network defaults to stagenet and Bitcoin network to testnet3. This is a breaking change. It is recommended to run the applications with --testnet first and not just run the application on mainnet without experience.

0.5.0 - 2021-04-17

Changed

• The quote protocol returns JSON encoded data instead of CBOR. This is a breaking change in the protocol handling, old CLI versions will not be able to process quote requests of ASBs running this version.

Fixed

• An issue where concurrent swaps with the same peer would cause the ASB to handle network communication incorrectly. To fix this, all messages are now tagged with a unique identifier that is agreed upon at the start of the swap. This is a breaking change in the network layer and hence old versions are not compatible with this version. We advise to also not resume any swaps that have been created with an older version. It is recommended to reset / delete the database after upgrading.
• An issue where the CLI would not reconnect to the ASB in case the network connection dropped. We now attempt to re-establish the connection using an exponential backoff but will give up eventually after 5 minutes.

Added

• Websocket support for the ASB. The ASB is now capable to listen on both TCP and Websocket connections. Default websocket listening port is 9940.
• Tor support as an optional feature. If ASB detects that Tor's control port is open, a hidden service is created for the network it is listening on (currently 2). The Tor control port as well as Tor socks5 proxy port is configurable.

0.4.0 - 2021-04-06

Changed

• The resume command of the swap CLI no longer require the --seller-peer-id parameter. This information is now saved in the database.

Added

• A changelog file.
• Automatic resume of unfinished swaps for the asb upon startup. Unfinished swaps from earlier versions will be skipped.
• A configurable spread for the ASB that is applied to the asking price received from the Kraken price ticker. The default value is 2% and can be configured using the --ask-spread parameter. See ./asb --help for details.

Changed

• Require the buyer to specify the connection details of the peer they wish to swap with. Throughout the public demo phase of this project, the CLI traded with us by default if the peer id and multiaddress of the seller were not specified. Having the defaults made it easy for us to give something to the community that can easily be tested, however it is not aligned with our long-term vision of a decentralised network of sellers. We have removed these defaults forcing the user to specify the seller they wish to trade with.

Fixed

• An issue where the swap CLI would fail on systems that were set to a locale different than English. A bad readiness check when waiting for monero-wallet-rpc to be ready caused the CLI to hang forever, preventing users from perform a swap.

Security

• Fixed an issue where Alice would not verify if Bob's Bitcoin lock transaction is semantically correct, i.e. pays the agreed upon amount to an output owned by both of them. Fixing this required a breaking change on the network layer and hence old versions are not compatible with this version.