-
3.3.5 Stable
released this
2026-09-06 12:37:20 +03:00 | 26 commits to main since this releaseReVolt VPN 3.3.5 — hardening and reliability release.
- Harden the control-plane trust boundary: strict nonce / destination-IP / port / SNI / XHTTP-path validation, capped no-redirect control responses, and the tunnel destination is pinned to the compiled server (a compromised API can no longer redirect user traffic).
- Vendor the pinned
flutter_vlessAndroid runtime in-tree, fixing an IPv6 leak and dropping on-device destination logging. - Enforce authenticated ephemeral local SOCKS5.
- Fail closed on connection-mode changes (persist before applying).
- Session countdown uses a monotonic clock; a VPN error now tears the tunnel down.
- Reproducible release verification (app-config SHA-256 pin).
- Remove unused Flutter dependencies, orphaned assets, and dead Dart wrappers.
See CHANGELOG.md for the full list.
Downloads