Skip to content

v0.3.3 - security fixes

Choose a tag to compare

@modulout modulout released this 08 Oct 16:57
· 2 commits to main since this release
  • The wallet signs only the plain EIP-3009 transfer for the price shown: a site's 402 can no longer steer it into a Permit2 approval or an ERC-20 approval extension.
  • Hosted server (agent.p2flux.com): a full request table refuses new requests instead of evicting ones that are waiting or already paid; callers are counted per IPv6 /64.

npm: @p2flux/mcp 0.3.3