Wallet Hashes To Verify Install Files

One possible vulnerability is downloading a malicious wallet. This could happen from any number of reasons like DNS hijacking, complex DGP rerouting attacks, someone breaking into the front-end of the QTum website, rogue team member, clever phishing website and not noticing, etc... A malicious wallet could potentially act just like a normal wallet but generate predictable keys and/or leak key information, which an attacker could later use to drain funds. It might be hard to realize something happened, so the damage/reward for a patient attacker might be quite large and affect anyone who downloaded the wallet until it was noticed.

Is there any place that I can view hashes to ensure I've downloaded the correct wallet software? Like when a new version of QTum Core is released the hashes of the executables could be distributed to a few places that could be checked against. If there were multiple places with the hashes it would be basically impossible for an attacker to breach them all at once.