33 releases 33 tags

RSS feed

• v1.0.0-beta.32 cbd330ddac

  Compare

  Morphit v1.0.0-beta.32 Stable

  agorise released this 2026-06-26 05:46:14 +00:00 | 2 commits to main since this release

  Signed by agorise

  GPG key ID: 53524E1F1017EB9C

  This release fixes a bug where your avatar could vanish after a profile edit, makes
  your avatar and display name show up everywhere they should, lets you skip typing
  your account name when you import from a seed phrase, makes that lookup private,
  hardens every text field against pathological input, and adds the usual round of
  polish to the profile and sign-in screens.

  Nothing here changes how trading works or what anything costs, and Morphit still
  keeps no data about you. If you're already signed in, your account, keys, and
  balances carry over untouched.

  Your profile and avatar

  • Fixed: your avatar no longer disappears when you change only your bio. Updating
    one part of your profile (say, just your short bio) used to overwrite the rest,
    which could orphan an avatar you'd already set even though it was still on chain.
    Profile updates now merge field-by-field — an omitted field is left alone, and only
    an explicit clear removes one — so a partial edit keeps everything else intact.

  • Your avatar shows up everywhere now. Once you've set an avatar, it appears in
    the top-right menu and anywhere your identity is shown, not just on your public
    profile page.

  • A display name is now optional. You can set an avatar and links without being
    forced to choose a display name first, and leaving the name blank no longer wipes a
    name you set earlier.

  • A bit more room for your avatar. The inline avatar size limit was raised so more
    designs fit comfortably.

  • Clearer broadcast status and a new avatar card in Settings. Publishing now says
    "Broadcasted" when it lands, and Settings gained a dedicated avatar card with a
    thumbnail preview and a confirmation step before you replace one.

  Signing in

  • Importing from a seed phrase now finds your account name for you. A seed phrase
    contains your keys but not your account name, so you used to have to type it in by
    hand. Morphit now looks the name up for you, and if it matches exactly one account
    it signs you straight in. If it's ambiguous or unavailable, you simply enter the
    name as before.

  • That lookup is private. The name lookup goes through your operator's own node,
    so the request — and your connection — never reaches a third-party node directly. If
    the lookup can't be made for any reason, Morphit quietly falls back to asking you
    for the name rather than reaching out to anyone else.

  • Import-screen polish. The remember-me option is gated correctly, and a mismatch
    is flagged with a clear red border. The "sign in with your keys" button shows a lock
    icon on the welcome-back screen.

  Privacy and hardening

  • Every text field has a length cap. A site-wide review added a length backstop to
    every free-text input and text area, on top of the existing validation, so an
    oversized or pathological paste can't slip through. The caps are set above every
    legitimate limit, so normal input is never cut off.

  • Clearer errors when your key doesn't match. Before publishing, Morphit now checks
    that your key actually has authority for the action and tells you up front if it
    doesn't, instead of failing further along.

  Small fixes and polish

  • The block-explorer card was removed from the home page (with a subtle hover lift on
    the cards that remain), the slide-in arrow links were unified into one consistent
    style across the app (correct in right-to-left languages too), the FAQ article hover
    border was toned down, and the profile page now shows your identity glyphs without
    repeating the @handle, with friendlier titles like "Message @username" on other
    people's profiles.

  For operators

  • The welcome dust for new accounts was nudged up slightly so a brand-new account
    has a touch more headroom out of the gate. Funding requirements are otherwise
    unchanged.

  • As with recent betas, this release changes no third-party dependencies.

  Under the hood

  • Two fresh, independent code reviews re-ran the full test, type-check, and
    security-smoke suites from a clean slate. The first audited every text input across
    the site for injection and overflow risks and confirmed there's no stored-cross-site
    scripting hole. The second re-checked the new profile, avatar, and seed-import work
    and caught one privacy issue before release: the seed-import name lookup had been
    reaching a third-party node directly. It now routes through your operator's node like
    the rest of Morphit, with a regression check added so a future change can't quietly
    reintroduce a direct lookup.

  Downloads

  • morphit-v1.0.0-beta.32.tar.gz
    2 downloads · 2026-06-26 06:30:29 +00:00 · 10 MiB
  • morphit-v1.0.0-beta.32.tar.gz.sha256
    1 download · 2026-06-26 06:30:26 +00:00 · 96 B