Skip to content

v0.34.3

Latest

Choose a tag to compare

@github-actions github-actions released this 07 Sep 14:59

What changed

  • Security. nmts wallet swap on Bluefin now calls only the contract package pinned in this
    release. Before, it read the "current" package from a public Sui node and preferred that answer,
    so a node giving a false answer could have sent the swap into someone else's code with your coin
    as the argument. The pinned package is still checked against the chain before a quote is shown;
    if that check refuses it, the Bluefin venue is unavailable until a release bumps the pin. DeepBook
    was never affected. No such node was observed and no loss is known.

Install

From the registry:

npm install -g @needmoretruth/nmts-cli@0.34.3

Or straight from this repository, without the registry:

npm install -g github:needmoretruth/nmts-cli#v0.34.3

Or, without a clone, from the tarball attached below:

npm install -g https://github.com/needmoretruth/nmts-cli/releases/latest/download/nmts.tgz

Node 22 or newer. Nothing is compiled by a C compiler and there is no native build
step; the encryption engine is a WebAssembly module carried in the package.