What changed
- Security.
nmts wallet swapon Bluefin now calls only the contract package pinned in this
release. Before, it read the "current" package from a public Sui node and preferred that answer,
so a node giving a false answer could have sent the swap into someone else's code with your coin
as the argument. The pinned package is still checked against the chain before a quote is shown;
if that check refuses it, the Bluefin venue is unavailable until a release bumps the pin. DeepBook
was never affected. No such node was observed and no loss is known.
Install
From the registry:
npm install -g @needmoretruth/nmts-cli@0.34.3
Or straight from this repository, without the registry:
npm install -g github:needmoretruth/nmts-cli#v0.34.3
Or, without a clone, from the tarball attached below:
npm install -g https://github.com/needmoretruth/nmts-cli/releases/latest/download/nmts.tgz
Node 22 or newer. Nothing is compiled by a C compiler and there is no native build
step; the encryption engine is a WebAssembly module carried in the package.