What we shipped

• Personal payment links settle on card, offline EFT and instant PayShap , and a payment made without an 80eight account is tracked behind a short-lived signed token.
• Settlement reaches the payee. One settlement path per rail, fee policy applied on provider-settled links, refund cover, a distinct chargeback receivable, and grace for a charge still open when a link expires.
• A crypto link claims its own address , so two open links never collide, and a link with nowhere to pay into is refused rather than accepted.
• Travel Rule screening on inbound crypto settlements across personal, payment-link and card-present flows.

• An Air payment is a first-class payment rail on the transaction, with per-device sessions, tips and round-ups folded into one total, receipts, and an activity feed.
• The business half — charge mode where the till sets the amount, staff-device attribution, business-run rooms, invoices settled by Air, and expense capture.

• A campaign engine on its own code namespace, kept separate from personal codes, with milestone progress, an opt-in leaderboard, nudges, share-channel attribution and a partner view.
• A reward accrues only once the invited person completes verification , and pays out to nobody before that.
• Farming detection runs on the platform integrity pipeline.

• Placing a limit order is idempotent , so a retried request can only ever place one order.
• Saved beneficiary edits are atomic , so two concurrent changes cannot lose one another.
• Corrected network configuration for USDT on Solana , so the asset always resolves on that chain.
• Steadier capacity under momentary latency — a single missed internal health check no longer removes a healthy instance from the pool.
• A payment provider cannot advertise a capability it does not have , and enabling an offering verifies that capability first.
• A cancelled or expired payment link shows its real status before anyone tries to pay it.

• Duplicate-identity detection. A second account presented with the same government-issued ID is flagged for review.
• Removing a device ends its session immediately , without relying on the identity provider to do it.
• Device integrity is recorded and risk-scored , report-only for now.
• Profile images are no longer derivable from one another.
• Refund paths enforce unspent-load reversal.

• Compliance-scoped writes require a specific capability , not a general administrator role.
• Support ticket reads mask customer identity fields unless the caller holds the relevant capability or a live, consented grant.
• The /chat endpoint is marked deprecated in the v2 specification.

• Foundations for better-timed, more relevant notifications — a versioned journey engine with a simulate mode that schedules everything and sends nothing, audience rules with a preview, delivery tracking, per-locale copy, holdout measurement, and second-operator approval before anything activates. It ships switched off and arrives gradually.

• Business till sessions carry the business's PayID. An 88Pay till request created for a business now shows and shares the business's own PayID everywhere it is displayed, copied or shared. Scanned QR payments always settled to the business and are unchanged.
• Businesses without a PayID receive one when a till opens. A business approved before PayIDs were issued automatically is assigned one on its first till session.

• Pay Profile shows the business. With a business selected, the Pay Profile card under Send shows the business's name and PayID, its QR encodes that PayID, and the share text names the business. Personal accounts are unchanged.

• 88Pay request screen shows the business's PayID. The amount-and-QR request screen for a business till printed, copied and shared the signed-in person's PayID; it now shows the business's own.
• Receive in 88Pay opens the business Pay Profile. With a business account selected, the Receive tile opens the business's Pay Profile (name, logo, PayID) instead of the personal one.

• Delivered over the air. This update reaches the installed 2.5.0 app automatically on its next launches; no store download is needed.

• A full set of security headers now ships with the web app — strict transport security with subdomain coverage, cross-origin isolation, a permissions policy, a referrer policy, and content-type and framing protections. A content-security policy runs in report-only mode first, so it can be tuned against real traffic before it enforces.
• Sessions moved to hardened, browser-protected cookies. The browser no longer holds a bearer token: sign-in tokens, invite tokens and two-factor enrolment secrets no longer sit in browser storage, the address bar or the clipboard. One HTTP client, one authentication policy, every confirmation surface migrated — this is the load-bearing change in the release.
• Only the headers we intend reach the platform , on an explicit deny list written so a later change cannot quietly readmit one.
• Third-party tag management is gone from the signed-in app , with the content-security policy tightened accordingly.
• Security requirements fail closed. An unresolved requirement now blocks rather than passes, no source maps ship to production, off-origin navigation from a notification is refused, and the redirect guard and identity-verification SDK load are both hardened.
• Every finding from the review is closed , with automated code scanning, secret scanning and a blocking dependency-audit gate now running on every change.

• Consumer card pay-in — the payment methods enabled for you at checkout, a grouped funding chooser, real card and wallet marks, and settlement timing per rail. A refusal is scoped to that attempt rather than ending the whole flow.
• Request-to-pay — send a request, see your inbox, approve or decline.
• PayLinks match the Business PayLinks design , the list pages properly rather than silently truncating, and someone with no account and no app can pay a link in the browser.

• A faster start. The app no longer waits on two sequential sign-in calls before it begins loading your main screen, and the entry bundle is roughly 29% smaller. Content-hashed assets are served immutably instead of being revalidated on every visit.

• Settings and Support rebuilt , with Support reachable before your verification completes.
• Signing out propagates across tabs.
• A render error is caught instead of white-screening the app.
• Document upload no longer strands you. Your documents had always uploaded; a follow-on internal record could fail and leave you stuck on the step. Fixed.
• Paying a link without an account works — an anonymous payer is no longer bounced to the sign-in screen.

• A correctly-filled trade is no longer rejected over a rounding difference. The safety check that compares a fill against what you asked for now derives its tolerance from the precision each venue actually reports, and adjusts per venue.
• More of a favourable fill is put to work. A buy that fills at a better price now invests the headroom rather than returning it unspent. Price protection itself is unchanged.
• Price lookups ask at each venue's minimum tradable size , so every instrument returns a live price instead of falling back to a cached one.

• Wallet creation survives a busy provider. A provider rate limit is now paced and retried rather than failing the wallet outright.
• Monitoring that can see a real gap. The wallet-provisioning health check now verifies the wallets themselves, not only the custody account behind them.
• A replay path for delayed trade receipts , so anything held back is reprocessed rather than left behind.

• 88Pay Air — proximity discovery, peer resolution, tap-to-pay, request-a-payment and split-with-the-room, with send limits set by the platform and mirrored by every client.
• Bands — pairing and resolution, plus an operator freeze that makes every tap resolve to a safe answer without altering any band.
• Card pay-in, end to end , and direct ZAR settlement through a new instant-payment partner.
• The business money rail — a business holds its own pay identity, and its pay-ins route to the business ledger.
• Per-operation balance reservations replace a single pooled counter, so concurrent activity on one balance is accounted for exactly.
• One explicit money-rounding policy in place of nine separate ones.

• A legacy donation endpoint has been retired and now returns 404, along with an unused payment-reversal call.
• A limit order whose assets contradict its pair is rejected rather than accepted.

• Splitting with one other person now goes out as a direct request for their share, rather than a collection with a single member — the same money, addressed the way the rail is built to address it.

• The ZAR deposit flow is rebuilt as Add funds , with card payments and instant ZAR pay-in behind it.
• A refused deposit shows you a way forward and returns the slide control, and a retry after a refusal is a genuinely new attempt rather than a reuse of a spent one.
• You land on your outcome and stay there , even if the return from your bank or card arrives twice.

• Social sign-in on Android works. The callback from the sign-in provider is now claimed correctly on production builds, so Accept completes instead of hanging. The build itself now fails if that ever drifts again.

• The wallet key path is rebuilt. Recovery-phrase generation now produces a full, standards-compliant BIP39 phrase with its checksum, and a phrase can no longer be captured by a screenshot or copied to the clipboard.
• Secrets on your device are protected at rest , what leaves the device is controlled, and a step-up confirmation is bound to the exact transaction it authorises.
• If you hold a recovery phrase generated by an earlier version of the app, generate and store a new one. You can do this from your wallet settings.

• A sustained pass over cold start, list rendering and animation — a smaller download, less work on the main thread, and screens that stop redrawing when nothing has changed. Live prices update without the app stuttering, and a screen you are not looking at stops polling until you return.

• USD amounts use the FX rate rather than a stablecoin cross, which had been adding a small premium to every dollar figure.
• A crypto PayLink asks for the crypto amount , not the rand figure.
• Saving financial details no longer overwrites the rest of your profile.

• Sign-up is shorter — the username and profile-photo steps are gone.
• Support follows the same verification rules as the website , with a route out for customers who cannot verify.

• Live market data with intraday charts , and FX rates on the rebuilt surface.
• An empty rates feed is shown, not hidden. The Rates panel used to disappear when the feed had nothing in it; an empty feed is a state worth showing rather than a reason to vanish.

• A parallel rebuild of the web app on the 2.5 design system — design primitives first, then the shell, sidebar, navigation and right rail, then the account, payments and product screens, all running against live APIs. AutoStack, ZAR8, PayLinks and Digital POS are live there; Spend and Cards are previews.
• A full mobile and tablet pass , with the responsive layer moved off inline styles and the wordmark now vector.
• Fixed along the way — business switching, ZAR8 yield, the deposit reference, navigation layering, cashier-mode kiosk takeover, tablet rail width and PayLinks layout.

• Circles arrives behind a flag , ahead of a gradual rollout.

• Signup attribution is sent on every path , including social sign-in.
• Android app links verify correctly , so an 80eight link opens the app as intended.

• A provider and payment-method catalogue. Payment providers and the methods they offer are described in one typed registry, with a readiness gate so a method only becomes available once it genuinely can be used.
• Effective-dated rate cards and a margin ladder. Pricing is defined with explicit start dates and a cost floor that fails closed, with floor, cap and shadow modes so a change can be measured before it applies to anyone.
• A resolved payment-methods endpoint carrying its own disclosures , plus a charge simulator that returns how a price was reached.
• Business invoices as PayLinks.

• Live FX rates over a streaming feed , currency charts at every range, and streamed market data.
• Feed health is visible. Live rates and rate history are reported as independent signals, so a feed serving prices but no history shows up as a problem instead of a permanently empty chart.

• A publishing platform for the blog, press releases, press kit and media coverage, with authors as first-class entities and a slim website content system behind it.

• Narrower permissions, enforced. Role-scoped gates enforce their named subsets, customer personal data is gated on an explicit capability and checked on every listing, credential creation and business money routes are gated, and non-custodial crypto withdrawals fail closed.
• A view-as-role preview , so the effect of a permission change can be checked before it is applied.

• A frozen step-up contract , device enrolment protected by your PIN, and a device assertion accepted as a second factor.

• Fiat deposits credit exactly once. Deposits run through a single crediting primitive with the fee applied consistently, and one deposit reference is recorded on every path.
• A ledger reconciler runs in shadow, comparing balances against the ledger so any drift is visible.

• Write-once verified proof publishing , an environment-driven chain configuration with a fail-closed connectivity check, and the token's true six-decimal precision.

• Attribution stays first-party. Signup attribution and funnel milestones are recorded by us and sent to no third party. No conversion data leaves the platform.

• Every screen, sheet and button rebuilt on a single design system — home, navigation, settings and every action — adapting properly to your screen size.

• Prices that keep moving. Live prices, 24-hour movement and charts that update continuously instead of freezing when you open them — and keep going if your connection drops.
• Intraday charts down to minutes and hours , with your own buy and sell markers on the timeline.
• One asset screen. Every asset opens the same detail view, wherever you tapped it from.

• Invoices as PayLinks. Fixed-amount, VAT-capable invoices you can resend.
• Contacts saved by hand , not only by scanning a QR code.
• A rebuilt 88Pay with clearer steps and the recipient named on the confirmation screen.

• A real help centre — searchable FAQs, recent articles, a WhatsApp handoff, and your tickets in a proper conversation view.

• Business Send and Receive use the business wallet , with the actions available to you matched to your role.

• Fewer trades blocked in error , and an unknown balance no longer reads as "no money".
• AutoStack recurring buys create properly again.
• A two-factor prompt guides you to set it up instead of telling you your code is wrong, and your trade carries on afterwards.

• Production builds ship the full production app on both platforms, including live transaction tracking, verified in the submitted builds.
• A permission the app never used was removed — 80eight prevents screen capture and never reads your photos or media.

(Android app links do not open the app in this build; that arrives with the next web release.)

• Capability-based permissions. Every privileged internal action is now gated on a specific, named capability rather than a general administrator role, so access is granted narrowly and deliberately instead of in bulk.
• Read and write tiers are genuinely separate. Roles intended for viewing only are enforced as read-only everywhere they appear.
• Named-role enforcement on sensitive operations. Resetting a customer's two-factor, editing banking details, handling trade requests, granting access and advancing an asset listing each require their own explicitly named role.
• Governed, audited roles. Role definitions live in one place as templates, and access grants and role changes are recorded.

(No web, app or API changes — customer-facing products were not part of this release.)

• Rebuilt create flow. A cleaner, shape-first wizard makes it faster to spin up a link and choose exactly how it should behave.
• Unlimited and never-expiring links. Create links that stay open with no cap and no expiry, for the times a one-off link isn't enough.
• Payment goals and direct requests. A goal thermometer shows progress toward a target, and direct-request links open straight to a clean pay-me landing page.
• Clearer link management. A dedicated options step, a "Total received" summary, a payer roster, and the ability to decline a request give you more control over every link.
• Right assets only. The create wizard now hides crypto that can't actually be used to pay, so you only offer what recipients can send.

• Candlestick charts. Switch any asset chart to a candlestick view, with your own buy and sell markers plotted right on the timeline.
• Your chart, remembered. Web now keeps your preferred chart type across sessions, so it looks the way you left it.
• Price alerts and order updates. A shared price-alert dialog and clearer order-cancellation feedback keep you informed, backed by proper order notifications.
• More accurate pricing. Quotes now reflect the direction-correct market leg, so the price you're quoted matches the side of the trade you're making.

• Pending applications, with a way out. Business owners can see business-account applications that are still in review and cancel a request they no longer need.
• Smoother verification. Business onboarding now collects company country for verification, wires up director KYC and consent, and surfaces clearer guidance when an address lookup or a required field is holding up the business-details step.

• Actions that match each asset. Every asset surface now respects per-asset capability flags, so you only see the actions an asset genuinely supports.
• Sharper asset visuals. Asset icons resolve from the live catalogue, ZAR8 shows its official coin logo, and any icon that fails to load falls back to a tidy lettered circle instead of a broken image.
• Cleaner ZAR8 details. Yield rewards now reflect the active reward-asset configuration, and a service charge that was never actually applied no longer appears on ZAR8.
• Payment security foundations. A new Payment Security area in settings lays the groundwork for personal step-up preferences, rolling out gradually.
• Friendlier sign-in. Logging in now lands you on your personal account instead of jumping straight into a business context, and password reset behaves correctly for social sign-in accounts.

• Presence signal. A lightweight, visible-tab heartbeat powers a more accurate online status.
• Money accuracy. Amount formatting now rounds down consistently, and a new money-endpoint parity check keeps web quotes aligned with the rest of the platform.
• Reliability. A hardened test pipeline and corrected app-link configuration make releases and deep links more dependable.

• Request-to-pay, group collections, and goals. Send a request that opens straight to a pre-filled payment, split a bill across a group, or run a collection toward a shared goal — all tracked in one place.
• Open-amount, reusable, and never-expiring links. Create a link that lets the payer choose the amount, reuse a single link again and again, or keep one open with no expiry — with reminders and per-link analytics.
• A clearer picture of what you've received and paid. New views surface the links you've been paid on and the links you've paid, with per-asset totals rolled up for you.
• Polished share images. PayLink share previews got a premium redesign, with proper handling of longer names and non-Latin scripts so every link looks right wherever it's shared.
• Safer settlement under the hood. Payment settlement is now replay-safe, so a retried or duplicated request can never double-count — your balances stay exactly right.

• Weighted-average cost basis. See a true weighted-average cost basis per asset, so your gains and returns reflect what you actually paid — for personal and business accounts alike.
• Your chart, your way. Your preferred chart type is now remembered across sessions.
• Faster charts, fresher prices. Charts warm their data on first request instead of returning empty, and our pricing engine resolves cross-rates and inverse pairs more accurately for tighter, more dependable quotes.

• Execution and near-execution alerts. Get notified the moment an order executes, plus a heads-up as one approaches its trigger — so you're never caught off guard.
• Live order tracking (rolling out). A new live-activity rail brings real-time, on-screen order and transaction updates to your device. It's arriving gradually as we complete the rollout.
• Cleaner trade emails. Trade confirmation emails are tidier and more accurate.

• Business API keys and a developer sandbox. We're introducing business-scoped API keys as the single, secure way to connect systems to 80eight, alongside a developer sandbox and portal and a curated set of public events to build against. These are rolling out to early partners first.
• Business payout rails. New payout rails for business accounts, plus a business account request history and more targeted withdrawal controls.

• A smoother path when a check doesn't pass. If an identity check is declined, you can now request a retry, and our team has admin-controlled tools to reset and re-run verification cleanly — so nobody gets stuck.
• Stronger business onboarding. Business (KYB) onboarding now requires a valid company country up front and surfaces director-confirmation details more reliably.

• A real help experience is taking shape. We're building end-to-end support — tickets with a full lifecycle, service-level tracking, satisfaction follow-ups, and email and WhatsApp channels that flow into one place. This is rolling out progressively behind the scenes ahead of a wider launch.

• Private attachments. Files shared in support and elsewhere are now served through short-lived, signed links, so only the right people can open them.
• Privacy-preserving contact matching. Finding friends already on 80eight now uses a privacy-preserving match, with a clear opt-out for being discoverable by contact.
• Stronger sign-in safeguards (rolling out). We're introducing an additional verification step on sensitive actions like withdrawals and payment-link creation. It's being enabled gradually so we can tune it without adding friction to everyday payments and trades.

• More reliable money handling. Deposit and settlement paths are more resilient, with automatic detection and replay of any missed provider notifications and stronger safeguards against duplicate credits.
• A dedicated ledger foundation. We began mirroring transfers into a standalone, double-entry ledger, laying the groundwork for even stronger financial integrity and reporting.
• Operational visibility. New internal health reporting spans every provider and dependency, and administrative changes now flow through a consistent approvals and audit path.
• Leaner, faster infrastructure. We retired unused trading integrations and tightened background-job controls for cleaner, more predictable performance.

• New candlestick charts. Switch between line and candlestick views on any asset, and your App remembers the chart style you prefer for next time.
• Your trades, right on the chart. Buy and sell markers now sit directly on the price chart so you can see your activity in context.
• Honest numbers. Portfolio values, cost basis, and profit-and-loss are read straight from the source — no placeholder zeros, no stale figures, and clearer precision on chart labels.
• One unified asset page. Home and Digital Wallet now share the same polished asset screen, scoped correctly to the account you're viewing.

• A faster way to create a link. The create flow is shorter and shape-first — fewer screens to get from idea to shareable link — with support for unlimited-use and never-expiring links.
• Pay real people, instantly. Pull straight from your device contacts with one shared picker across requests, group collects, and splits, including search by phone number and an A–Z invite list.
• A clearer requests view. The home Requests card shows who's asking and how much, and your history now includes the links you've paid — not just the ones you created.
• Group collects & goals. Collect from a group, track progress toward a goal, and decline or settle requests cleanly, with safeguards so a payment is never double-counted.

• A smoother path to opening one. Business onboarding and verification were rebuilt end to end — clearer director steps, in-app identity verification, address search scoped to your country, and an optional business logo.
• Land where you expect. After submitting a business application you go straight to your dashboard, and pending applications now show up with the option to cancel.
• Verification that stays inside the App. Identity checks run in a secure in-app view rather than bouncing you out to a browser, with clearer status and retry.

• A refreshed confirm experience. Confirming a payment now uses a smoother, more accurate biometric prompt and a silky, paste-friendly code entry across every money flow.
• See problems sooner. If a balance is too low, the App tells you before you reach the confirmation step — no dead ends.
• Extra protection, rolling out gradually. A new Payment Security screen where eligible accounts will be able to turn on stronger sign-in for sensitive actions, with a trusted-device window. It arrives progressively rather than switching on for everyone at once.

• A clearer approval flow. Identity-verification approvals now open the right screen from a notification, show live status, and finish on a proper success screen — rolling out gradually.

• Foundations for ZAR8, rolling out gradually. Early ZAR8 experiences — including yield tracking, a cleaner Track overview, and yield history — are being introduced to a limited group as we roll them out. Availability expands over time.

• In-app help. Consumer support tickets, an FAQ, and chat-style ticket history — including ratings and reopen — are rolling out gradually.
• Price alerts & order updates. Price alerts and live order updates for limit orders near execution are being introduced progressively.

• Steadier, more consistent pricing. Money quotes for send, withdraw, and 88Pay now come from one authoritative source, so pricing is consistent across the App. Trades are still re-priced at execution and protected by slippage limits, so the final rate can differ slightly from the quote you saw.
• A calmer launch and smoother navigation. We fixed a rare launch crash, kept background splash video silent so it never interrupts audio, removed the white flash between screens, and repaired dead close/back buttons across the App.
• Fewer surprises. Notifications no longer leak across account switches, and a range of layout, keyboard, and safe-area issues were cleaned up throughout.

• Business Suite — foundations. Team management, roles and permissions, and business onboarding are now on the web (rolling out).
• Business verification. A full, in-app business KYB/KYC verification flow.

• Clearer trading & rates. Buy and sell rates now reflect the price you'll actually receive.
• Cleaner money display. A consistent pass across balances, amounts, and transaction details — correct currencies, precise values, and clearer receipts throughout.

• More reliable sign-in and session handling, so a brief hiccup no longer logs you out.

• Business accounts on mobile — foundations. Team, onboarding, and cashier screens plus in-app business verification (rolling out).

• More reliable sign-in. Reopening the app after it's been closed no longer occasionally signs you out.
• Stay up to date. You'll now be prompted when a newer version is required.
• Clearer trading & wallet. Rates reflect what you'll actually receive, with a broad clarity pass across balances, amounts, and receipts.
• More reliable sessions. Sign-in and session handling are steadier, so a brief hiccup no longer logs you out.

(This update is a new app version — update from the App Store or Play Store to get it.)

• Clearer, more honest trade pricing. Buy and sell prices now come from a single, transparent pricing engine, and rates are shown the way you'll actually receive them.
• Business accounts — foundations. The backend for team accounts, roles, invitations, and business verification (KYB) is now in place, ahead of the Business Suite rollout.
• A richer asset experience. Clearer asset classification and finer per-asset controls, so the assets you trade are managed more carefully.

• Stronger crypto custody. Our custody integration was upgraded and hardened, with extra safeguards on deposits and withdrawals so funds credit reliably and correctly.
• Faster wallet & portfolio. Balances, portfolio value, and account screens load faster and more accurately.

• More reliable sign-in. Reopening the app no longer occasionally signs you out.
• Stronger money-movement protection. Extra safeguards across money-moving actions, including protections that help prevent duplicate or mistaken transactions.

• Dozens of reliability, correctness, and performance improvements across trading, payments, and custody — shipped on a hardened, well-tested release pipeline.

• Adding a bank account no longer fails validation. The request from the app was being rejected before it reached the platform because it did not carry a field the app never collects. The account holder now defaults to the account owner's legal name, so every saved account still carries one. The web app was unaffected.
• Also in this window — a corrected effective trade rate, compatibility with older app builds on the trade path, and additional safeguards on deposit and withdrawal amounts.

• Crypto deposits and withdrawals credit reliably. The credit, debit and refund steps now complete as a single unit and retry a transient interruption, so a movement is never left half-applied. A completed deposit is reconciled against the amount that actually arrived on-chain before it is credited, and any divergence beyond the network fee raises an alert.
• Network fees on a crypto send release correctly. The fee is held with the send total, so nothing stays reserved once the send completes.
• Trades show the correct rate. A trade now stores the canonical quote-per-base rate as its customer-facing price, correcting the rate displayed on a sell. Historical trade records were corrected to match.

• Faster account, wallet and market reads. Profile, portfolio and asset lookups now run in parallel.

• Sharper operations. Production alert paging, plus reconciliation tooling for unmatched withdrawals and reserved balances.

• A uniform 0.38% spread, both ways. Every tradable pair now resolves to the same default spread — our interim buffer for slippage and provider costs — instead of its own rate.
• Legacy per-pair rates cleared. Pairs that previously carried 1% or 1.5% now resolve to the uniform 0.38%.
• ZAR8 ↔ ZAR carries no spread. The native 1:1 peg is exempt.

• Reopening the app after a while keeps you signed in. A cold start no longer sends you back to the sign-in screen.

(An interim default — a dedicated pricing service will replace it.)

• Correct purchase amounts in history. A past "Bought" row now shows the exact amount paid rather than a recalculated figure that could read slightly high. Applied across the transaction list, the all-transactions view, the single-transaction detail and business-suite rows.

(Display only — your balances and the trades themselves were always correct.)

• "Save contact and send crypto" works again. Adding a new crypto recipient on the Send Crypto screen no longer fails, and saving a contact and sending now completes for every asset and network.
• Clearer messages. If a save cannot complete, the app tells you the specific reason instead of showing a generic error.

• Delivered over the air. This update reaches the installed 2.0.27 app automatically on its next launches; no store download is needed.

• The recurring-buy premium is applied consistently. The 1% AutoStack premium is now taken the same way on every plan and booked to the platform ledger at settlement, so what you are charged and what you receive always reconcile. The rate is configurable rather than hard-coded.
• Every scheduled buy runs exactly once. Additional safeguards guarantee a single run per slot, recover a plan left stuck mid-run, and reschedule after a failure instead of ending an active stack.
• Historical records are accurate. Imported data from the previous platform no longer produces buy orders that never happened.
• Full operational control. A stack can be paused, resumed, stopped, skipped or retried, and the premium adjusted — every action audited.

• A dedicated profit-and-loss ledger. Trading now records fees into a typed, duplicate-safe ledger with a single source of truth for fee resolution. It runs in shadow for this release — customer pricing is unchanged.

• Withdrawals initiated outside the app are recognised. On-chain withdrawals that originate outside our normal flow are adopted and reconciled rather than left unmatched, with guards against acting on one mid-broadcast.

• Business portfolio performance figures, redesigned HTML emails, and the ability to resend a verification email during onboarding.

• Password resets now run through our identity provider. Requesting a new password uses the same hardened, hosted flow that protects sign-in, replacing the older in-house reset path.

• Trade recovery is a single atomic step. The background process that clears a trade left mid-execution now claims and releases it in one operation, so a trade can only ever be handled once.

• Email delivery is monitored. A failed send raises an operational alert, and the platform verifies its email configuration at start-up rather than discovering a problem when the first message is due.

• Safer trades by default. Every instant trade now requires a stable safety key, so a network retry or double-tap can't fire a second trade — replays are de-duplicated instead of executing twice.
• No deposit left behind. Crypto deposits that can't be matched to an account are now held safely in a suspense ledger and resolved by support, instead of being dropped.
• A constant watch over every balance. Continuous reconciliation and crash-recovery hardening across trade settlement — automatic unwinding of partial trades, recovery of stuck trades, and guarantees that a settlement can never debit without crediting.

• Clearer trade history. Failed trades now appear in your history with a clear status and no balance impact, and trades no longer show as two separate rows.
• More accurate trade records. Trade records now carry a precise, consistently-denominated execution rate for clearer display.
• Business wallet fixes. Improved account resolution for business wallets, including more flexible handling of quote amounts.

• Stronger pair controls. Pair availability is now enforced server-side — an unavailable pair is either declined clearly or transparently resolved to the right market, with no change needed on your side.
• Slimmer trading data. Internal operator-only fields are no longer included in the public pairs response; every field the apps read is unchanged.

(A note on integrations: instant trades now require a non-empty safety key — all shipped 80eight apps already send one; only direct API integrations need to check.)

• Safer payments. Sending crypto or paying over 88Pay is now guarded against accidental double-sends — a quick double-tap can't send twice.
• Live market charts. The markets list and home screen now show real price sparklines, with cleaner charts and tidier navigation.
• Smoother app launch. No more white flash on startup, plus a refreshed slide-to-confirm.
• Reliable auto-stack timing. Recurring auto-stack purchases now keep the exact time you set, handled consistently in your local time.

• Receiving and deposits. Fixed a "this asset doesn't have a wallet" error on brand-new installs, and the deposit reference now shows even if you haven't linked a bank account yet.
• For business accounts. A wave of fixes to business onboarding, the business home cash-flow view, deposits, and trading.

(Coming soon: the gentle "your app is out of date" reminder switches on per-environment when ready.)

• Safer payments. Sending, withdrawing, and buying are now protected against accidental double-submits — a quick double-tap or a retried request can't move your money twice.
• Hardened account management. Fixes to password reset, two-factor settings, anti-phishing, and PIN verification, plus a tighter guard on the trade-confirmation screen.

• Accurate withdrawal fees. The withdrawal screen now shows the actual fee from the live quote — and the exact amount you'll receive — instead of a fixed estimate.
• Clearer notifications. Improved display for business, account, and PIN-reset notifications.
• Invite improvements. Your referral code now shows on the Invite screen, matching the mobile app.

(Coming soon: business tools — Business Suite, Pay Links, and in-store payments — continue to be hardened behind the scenes and will switch on for eligible accounts in a future update.)

• More assets settle first time. Fixes buys of certain assets (for example, ETH and SOL) that were failing at the final step after a precision regression. Your funds were always released untouched, and the trade now completes.
• A clear message when a trade can't complete. When a trade can't go through, the app now receives a clear, human-readable message instead of a generic server error.

(Operationally after release: two crypto-withdrawal reliability fixes so withdrawals reliably reach custody.)

• More assets settle first time. Fixes a case where buys of certain assets (for example, ETH) could fail at the final step. Your funds were always released untouched, and the trade now completes.

• Nothing left half-done. If a multi-step trade can't be completed after it has already partly executed, the executed part is now automatically unwound — so the platform never holds inventory you didn't ask for, and nothing is left half-finished.

• Trades complete from the latest build. Resolves a case where instant trades placed from the latest app build could fail at the first step. As always, your funds were released untouched — nothing was ever lost — but the trade now completes.
• Accurate display rates. Improves the accuracy of the displayed ZAR exchange rate so it matches the rate trades actually execute at.

(Operationally this window: a crypto-withdrawal reliability fix and recovery for any previously-stuck withdrawal transactions.)

• Smarter venue routing. For the major ZAR pairs, the engine now picks the venue by trade size automatically — small trades execute directly on the local exchange, larger ones via the OTC desk — so trades below the OTC desk's minimum, which previously failed, now complete.
• Two blocking cases hardened. Two upstream-rejection cases that were stopping trades are resolved, with the real reason now surfaced internally when a venue rejects an order.

(Operationally this window: ZAR withdrawal limits raised to R1m per day and R30m per month, and admin crypto approve/reject endpoints documented to fix a tooling error.)

• All-or-nothing trades. For instant trades that route through an intermediate currency (for example, buying an asset with ZAR via USDT), the engine now confirms every leg can be priced before it executes any of them. If a leg can't be priced, the whole trade is declined up front and your funds are released untouched.
• A guaranteed referral code. Every user now has a unique referral code — the code you share so sign-ups attribute back to you. Existing codes are preserved.

• Withdrawals unblocked. Resolves a regression where some mobile users hit "Something went wrong" on every fiat withdrawal — withdrawals work normally again.

• Safer operations. Hardened internal tooling so operator-set states are preserved by default, with safer maintenance routines and a read-only data-integrity audit.

• Withdrawals work again. If you'd recently seen "Something went wrong" when tapping Withdraw, that's resolved — your withdrawal request goes through as expected.

• More reliable sign-in. Continued improvements to how the app keeps you signed in securely on your device, building on the security work in earlier 2.0 releases.
• Smoother future releases. Build-pipeline tweaks behind the scenes.

• Native "Continue with Apple" on iPhone. Tapping Continue with Apple now opens the built-in iOS Sign-in-with-Apple sheet, with Face ID or Touch ID — quicker, more familiar, and without leaving the app.

• 88Pay handles resolve again. If you'd seen "88Pay isn't ready yet" despite having a valid handle, that's fixed — your handle loads and you can send and receive over 88Pay as expected.
• Your full trading balance. Your trading wallet, crypto list, and individual asset screens now show the total value you hold — available plus anything locked in an order — instead of only the available amount. The amounts you can actually spend are unchanged.
• Smoother market screens. Resolved a class of crashes on the markets and chart screens when price data came back in an unexpected shape, and tightened which business actions appear based on how your account is set up.
• Complete deposit details. The Make-a-Deposit screen now shows the full bank account number and account type alongside the bank name, branch, SWIFT, and your reference.
• Friendlier sign-in and polish. Clearer sign-in error messages, now baked in for fresh installs, plus refreshed app-icon assets on the store listing.

• A gentle "your app is out of date" reminder. Polite, one-tap, and fully dismissible — rolling out gradually.
• More ways to pay. Tap to pay people nearby, pay anyone even off 80eight, and personal pay links — in flight from the previous release; we'll let you know when they switch on.

(Behind the scenes, we're continuing to strengthen how your session is secured on your device.)

• Trades that can't overspend. Orders to our liquidity layer are now slippage-bounded and attempted on a single assigned venue, so a transient error can never double-execute an order and a buy can never exceed the amount you requested.
• A more secure session model. Clients can now choose how their session token is delivered — browser-only secure cookies, or token-in-body for native apps that hold their own credentials — with native apps able to store a rotating refresh token in a secure device keychain.
• More predictable sign-in. An explicit email-and-password sign-in always authenticates with those credentials rather than a stale session, so you reliably get a fresh token back, with consistent error responses across the auth surface.

• Stronger admin tooling. New internal controls back multi-jurisdiction company settings, push-campaign broadcasts, per-pair fee and trade configuration, and admin reset of two-factor — all internal admin-console APIs, not part of the public contract.

(Every change in this release is additive — clients that send no new headers keep their exact current behaviour.)

• A unique, branded reference. Your account reference — and therefore your bank deposit reference — is now guaranteed unique and 8-prefixed for everyone, generated through a single, consistent path across every sign-up route.
• A careful one-off backfill. A migration tidies up older references and keeps a full record of any change, so deposits sent against a previous reference can always be reconciled.

(No action needed for integrators — note only that an existing user's deposit reference may change when the migration runs.)

• 88Pay handles resolve again. If you'd seen "88Pay isn't ready yet" despite having a valid handle, that's fixed — your handle loads and you can send and receive over 88Pay.
• Your full trading balance. Your trading wallet, crypto list, and asset screens now show the total value you hold — available plus anything locked in an order — not just the spendable amount. The amounts you can spend are unchanged.
• Smoother market screens. Resolved a class of crashes on the markets and chart screens when price data came back in an unexpected shape, and tightened which business actions appear based on your account setup.
• Complete deposit details. The Make-a-Deposit screen now shows the full bank account number and account type alongside the bank name, branch, SWIFT, and your reference.

• Tidied data handling. Standardised how your account reference is read across the app and removed a piece of legacy code, with no change to anything you'll see or do.

• 88Pay to anyone. Send to any phone number — even someone who isn't on 80eight yet. They'll receive your payment and can claim it as soon as they sign up.
• See balances your way. Choose your display currency (USD or ZAR) across your wallet and the market, with your preference remembered between visits.
• Smoother identity verification. A more flexible verification experience that supports an additional provider, so getting verified is faster and more reliable.
• Cleaner buy and sell. More accurate balances and pricing, with sensible fallbacks when market data is briefly unavailable — plus a tidier transaction history and quality-of-life polish across the app.

• Hardened account security. Strengthened account and data protection across payments and wallets, including stronger two-factor protection on sensitive actions.
• A modern foundation. Re-engineered on a fully-typed TypeScript codebase and the v2 platform, with expanded automated testing and new, more reliable hosting.

• Business Suite. Dedicated business accounts and wallets.
• Accept payments. In-store point-of-sale and shareable payment links, with scan-to-pay.
• Business ZAR8 yield. Earn yield on your business ZAR8.

(These are not yet switched on — watch this space.)

• A more premium feel. App-wide haptics, a refreshed "liquid glass" design, a signature launch sound, and slide-to-confirm on important actions — small touches that make 80eight feel fast and considered. (Haptics can be turned off and respect Reduce Motion.)
• See balances your way. View amounts in USD or ZAR across your wallet and the market — while your actual rand cash balance always stays clearly in ZAR.
• Smoother identity verification. A more flexible verification step that supports an additional provider, so getting verified is quicker and more reliable.
• Cleaner sign-in and onboarding. Friendlier error messages, improved country and date-of-birth pickers, and signing up now drops you straight into a working wallet.
• Stronger account security. Your session is now protected with hardware-backed device security, and you'll stay signed in more reliably with fewer surprise logouts.
• Faster, lighter, more reliable. Push alerts that stop mid-session now recover on their own and sign-out clears your notifications and badge; screens are faster and lighter, with smoother history scrolling, a redesigned receipt screen, and polish across the launchpad, drawer, and account menu.

• Protection throughout. Strengthened account, payment, and on-device security across the app, including safeguards that help prevent duplicate or mistaken transactions.
• A modern foundation. Rebuilt on Expo SDK 55 with over-the-air updates, expanded automated testing, and a hardened build pipeline.

• Tap to pay people nearby. Find other 80eight users right next to you over Bluetooth and pay them with a tap — no QR codes or typing handles.
• Pay anyone, even off 80eight. Send to a phone number or email; they'll get your payment and can claim it after signing up.
• Personal pay links. Create and share payment-request links from your personal account, with rich previews when shared.
• In-store payments. A refreshed merchant cashier experience with scan-to-pay.

(These aren't switched on yet — watch this space.)

• Stronger account security. Sign-in now uses secure, browser-protected sessions with built-in protection against cross-site request forgery — a meaningful step up in how your account and your money are protected.
• More reliable identity verification. We added a second verification provider and consolidated how identity checks work, so getting verified is faster and more dependable.
• Compliance, built in. Expanded regulatory and travel-rule tooling so transfers stay compliant as 80eight grows.
• More to hold and earn. New assets, a refreshed asset experience, and the ZAR8 yield programme.
• Faster wallet and trading. More reliable wallet, trading, and transaction experiences, with more accurate balances and pricing.

• Account protection throughout. Strengthened authentication, two-factor protection, and account-access controls across the platform, with sensitive and money-moving actions protected by additional verification.
• Hardened money movement. Strengthened payments and account data across the board, including safeguards that help prevent duplicate or mistaken transactions.
• A modern foundation. Re-engineered on a modern, fully-typed platform with expanded automated testing, new and more reliable hosting, and a hardened release pipeline.

• New ways to pay. We're putting the finishing touches on major new ways to pay people and businesses, rolling out gradually. (Not switched on yet — watch this space.)