MoneroUSD Installers

Sovereign binary distribution — an off‑DNS upgrade path for every installed MoneroUSD wallet. No registrar pressure, no edge kill switch, no update.monerousd.org dependency.

Verified Shipped with wallet Chain-anchored

How it works

The release pipeline publishes installer artefacts + a signed SHA256SUMS manifest to this sovereign domain via SITE_PUBLISH on the USDm chain.
Every installed wallet runs services/site-updater.js which polls /v1/sites/installers.monerousd.org for the latest rootHash.
When a new version is detected, the wallet downloads the installer over the indexer (or BitTorrent fallback) and verifies it against the on-chain hash before offering to upgrade.
The user approves the upgrade in a familiar approval modal — same flow as SITE_PUBLISH / TOKEN_CREATE.

A first-time install still needs the regular update.monerousd.org path (you have to download the wallet binary somewhere). But once the wallet is installed, every subsequent upgrade can flow through this chain-anchored channel — closing the OTA single-point-of-failure.

Latest release

Version—

Channelstable

Published—

Root hash—

Platforms

Platform	Arch	Size	SHA-256
Loading manifest…

Verify any download manually: shasum -a 256 <file> against the value above. The wallet's site-updater automates this; the column is shown for transparency.

Architecture invariants

SW-1: every byte served from this bundle is SHA-256 verified against the on-chain rootHash before render. Hash mismatch ⇒ T1 fallback to the wallet's bundled copy.
SW-3: served only from 127.0.0.1:27752 — never reachable from the network.
SW-4: only the official publisher key can update this domain. Hostile actors can’t spoof a fake installer.
SW-19: the bond + update fees route 100% to the protocol reserve via chargeBond('reserve'). The installers domain itself is verified, so first-publish bond was paid by the official publisher account at registration.