• v3.3.5 4718a5912a

    3.3.5 Stable

    esefxdz released this 2026-09-06 12:37:20 +03:00 | 26 commits to main since this release

    ReVolt VPN 3.3.5 — hardening and reliability release.

    • Harden the control-plane trust boundary: strict nonce / destination-IP / port / SNI / XHTTP-path validation, capped no-redirect control responses, and the tunnel destination is pinned to the compiled server (a compromised API can no longer redirect user traffic).
    • Vendor the pinned flutter_vless Android runtime in-tree, fixing an IPv6 leak and dropping on-device destination logging.
    • Enforce authenticated ephemeral local SOCKS5.
    • Fail closed on connection-mode changes (persist before applying).
    • Session countdown uses a monotonic clock; a VPN error now tears the tunnel down.
    • Reproducible release verification (app-config SHA-256 pin).
    • Remove unused Flutter dependencies, orphaned assets, and dead Dart wrappers.

    See CHANGELOG.md for the full list.

    Downloads