Subscribe
Back to News / Development

Sparrow Wallet 2.5.5 Released After Security Reviews

OR
BY ORANGEMAN
Verified Contributor
| 3M AGO | 3 MIN READ |
Sparrow Wallet 2.5.5 Released With Security Fixes and System Theme
DEVELOPMENT LIGHTNING NETWORK PAYMENTS

Sparrow Wallet has released version 2.5.5, a maintenance update for the open-source Bitcoin desktop wallet.

The official X account announced the release on September 17, 2026. Developer Craig Raw signed the build the same day. The project said the update includes bug fixes after recent security reviews. And a new System theme that follows the operating system’s light or dark setting.

Sparrow did not publish a separate severity rating or claim that user funds were at immediate risk. The announcement thanked contributors and security researchers who provided input.

About Sparrow Wallet

Sparrow is a non-custodial desktop Bitcoin wallet for Windows, macOS, and Linux. It is built for coin control, multisig, hardware wallet use, and detailed transaction inspection.

There is no official iOS or Android app. Fake mobile apps using the Sparrow name have appeared in app stores before. Download only from the official site and verify the signed manifest.

What’s New in Version 2.5.5

The main visible change is View > Theme > System. New installs use this setting by default, so the wallet matches OS light or dark mode.

The rest of the release tightens verification and device support:

  • Signatures on a finalized PSBT are verified before fields are copied into an open transaction.
  • Silent Payment output scripts are checked before device signing, combining, or export. A PSBT signed over Silent Payment outputs that have not been computed is rejected.
  • Taproot output descriptors that contain a script tree are rejected.
  • Copy and QR export are blocked if an extended private key is pasted into the keystore xpub field.
  • BitBox02, Trezor Safe 7, Ledger, Krux, Jade, and Coldcard flows all received narrower import, signing, or logging fixes.
  • Silent Payments scanning, reorg handling, fee bumping, and CSV import/export also received bug fixes.

These are defensive changes. They reduce the chance that a malformed or incomplete transaction is treated as valid.

How This Fits the 2.5.x Series?

This is not a feature leap like 2.5.0, which added Silent Payments wallets, an SP-capable Frigate public server, and bitview.space as a fee-rate source.

It follows 2.5.4 from late August 2026. That release came after an AI-assisted code review. Craig Raw said he reviewed the findings and did not consider the issues likely to put funds at risk. While still recommending users update.

Read 2.5.5 in that context: another hardening release, not a claim of active theft from official Sparrow builds.

Should You Update?

For most users on a connected desktop install, yes. Use the official download page and verify the files.

Air-gapped users often wait and verify more carefully. Do not install “Sparrow” from the Apple App Store, Google Play, or unknown GitHub forks.

Official Sparrow is the desktop wallet signed by Craig Raw.

How to Download and Verify Sparrow 2.5.5?

  1. Go to https://sparrowwallet.com/download/.
  2. Download the build for your platform.
  3. Also download sparrow-2.5.5-manifest.txt and sparrow-2.5.5-manifest.txt.asc.
  4. Verify the manifest signature. It is signed by Craig Raw <craig@sparrowwallet.com>.
  5. Check the installer SHA-256 hashes against the manifest.

Sparrow 1.8.3 and later can verify downloads inside the app by dragging files onto the wallet window. Full changelog: GitHub release 2.5.5.

If you already use Sparrow, update from the official site and verify the signature. If you do not use it, this release does not change that decision by itself. It does show the 2.5.x line is still being reviewed and patched.
ENJOYED THIS ARTICLE?Support the authorSend a zap over Lightning or on-chain
BITCOINBITCOIN DEVELOPMENTLIGHTNING NETWORK