From 0562d95a54cbcc8b9694b97ed416d4c5dc75095c Mon Sep 17 00:00:00 2001
From: DHEBP <152355273+DHEBP@users.noreply.github.com>
Date: Wed, 17 Jun 2026 09:16:21 -0400
Subject: [PATCH] =?UTF-8?q?docs(changelog):=20record=201.0.7=20=E2=80=94?=
 =?UTF-8?q?=20asset=20handling=20+=20transfer=20validation?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add the native-DERO base-coin separation and hardened transfer
validation to the 1.0.7 section, and set its release date. Required
before tagging by the changelog-guard.
---
 CHANGELOG.md | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a84226d..f50be64 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,11 +7,15 @@ Versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
 
-## [1.0.7] - 2026-06-09
+## [1.0.7] - 2026-06-18
 
-Linux release binaries now run on current distros out of the box.
+Clearer asset handling, hardened transfer validation, and Linux release binaries that run on current distros out of the box.
+
+### Changed
+- Wallet: native DERO is managed as the base coin (Dashboard / Send), separate from the contract-token portfolio — which now lists contract assets only.
 
 ### Fixed
+- Wallet: hardened transfer validation so a native-DERO burn is consistently rejected across all send paths.
 - Linux: release binaries are built against `webkit2gtk-4.1` (libsoup3) instead of the discontinued `4.0`, so they launch on Ubuntu 24.04+, Debian 13+, Fedora 40+, and Arch without a manual library symlink. CI now fails the release if a Linux binary links the old `4.0` runtime.
 
 ---