Release: develop -> main - #4051

Merged

davidleomay merged 10 commits into

mainfrom

Jul 3, 2026

Commits on Jul 2, 2026

feat(user): add additive RealUnit service-provider marker on UserData (#4045)
TaprootFreak
authored
1961ff0

Commits on Jul 3, 2026

fix(auth): harden staff 2FA factor and revoke addressless JWTs (#4028/#4029/#4032) (#4050)
TaprootFreak
authored
b1580b3
fix(exchange): persist Scrypt deposits event-driven from the balance transaction stream (#4044)
TaprootFreak
authored
7f60647
feat(realunit): add customer-scoped RealUnit support dashboard endpoints (#4054)
TaprootFreak
authored
ffad688
feat(auth): centralize staff 2FA enforcement and auto-revoke blocked accounts (#4052/#4053) (#4055)
TaprootFreak
authored
ed055bc
fix(kyc): restore kycFileId assignment (NULLS-FIRST max bug) and make it race-safe (#4023)
Danswar
authored
54175b7
fix(kyc): assign merged kyc steps absolute sequence numbers (#4027)

Danswar
and
davidleomay
authored
ed76cee
fix(exchange): skip Scrypt websocket setup when unconfigured (#4008)
Danswar
authored
57e8712
fix(realunit): redact data from the API trace middleware (#4007)
Danswar
authored
e718056
feat(support): brand support mail by the app the ticket was opened from (X-Client) (#3937)
joshuakrueger-dfx
authored
b4cf5ea