Canonical SHA-256 checksums for every published build. This page lives at the on-chain
name releases.silentmode.bch; the name pins where it is served from, so a tampered
mirror cannot change what you check against here.
Theseus Navigator 0.3.47
Windows 64-bit · unsigned · 2026-09-14 · 0.3.47 — Plug-ins section + in-panel wallet updates, Aegis 0.6.31 — Plug-ins section takes over from Extensions for Silent Mode's first-party components. The bundled Aegis wallet is now surfaced there with its own copy and its own update flow instead of appearing again as a raw extension — one source of truth. Add-ons can drive an in-panel update flow: check the OTA channel, stage a signed build, and cleanly relaunch Theseus, without asking the user to open Settings. Aegis 0.6.31 rides along: BTC picker trimmed to Signet (Testnet3 is de facto dead); the wallet strip folds mainnet + testnet into one row per chain with a ▾ dropdown to pick which network's balances to see; per-unit price sits directly under the ticker; + Add and ⋯ More moved out of the strip into the header next to a new ✎ edit chip; footer update chip is now a two-step Stage → Restart flow using the new plug-in API. Includes everything from 0.3.46 (updater self-heal + BCNR fetch error page).
Windows 64-bit · unsigned · bundled Node runtime · 2026-09-09 · Actually works this time — 0.1.1's persistent install log caught the bug 0.1.0 had had silently all along: install.ps1 died at the CA-rotation probe because PowerShell 5.1's $ErrorActionPreference=Stop plus a native subprocess writing to stderr = "NativeCommandError", killing the script before it could register the daemon or add the last NRPT rule. 0.1.2 routes every node call through Invoke-NodeCapture (Windows-level stream redirection, PS 5.1 doesn't touch the streams). TLD list now cascades: comma-separated indexer list → local cache → electrum WSS → bundled snapshot → bootstrap, and any authoritative fetch refreshes C:\ProgramData\Ariadne\tlds-cache.json. CA import via .NET X509Store direct (no Cert: PSDrive dependency). Upgrades stop the running daemon before file replacement so node.exe is no longer held open during install.
Android 5.0+ (API 21) · self-signed release key · 2026-09-14 · 0.18 — security fix + desktop parity — Security fix and desktop parity. The app no longer carries any storage credentials: Sia-hosted (s3) content is fetched through the public relay at navigate.st, exactly as Theseus does — earlier builds signed their own S3 requests with an embedded key. Name resolution now uses the same canonical model as the desktop resolver (names are label.tld; coinspectrum.x and coinspectrum.bch are distinct), which also fixes on-device lookups against the bundled and mirrored index that previously always missed. BCNR-first on any TLD once the chain knows a name (poutakidis.de, syskypo.de), the active TLD list refreshed from the per-TLD registry via navigate.st/api/tlds, the port-443 electrum route tried first for mobile carriers, record precedence matching Theseus (subdomain + ip first, p never under a subdomain), relay HTML base-href stripped, and start-page cards refreshed from dl.silentmode.st/home-cards.json like the desktop start page.
How to verify. After downloading, compute the file's SHA-256 and compare it to
the value above — on Windows: certutil -hashfile <file> SHA256;
on Android, hash the downloaded .apk on a computer before you move
it to the phone, or use any file-hashing app. Nothing here is signed by an authority your device
already trusts — by design — so it will warn about an unrecognized app; the checksum is the
real check. The machine-readable manifest is at
releases-manifest.json.