v0.1.16

Release v0.1.16: 2026-07-31

This release pairs a sign-up and sign-in hardening pass, including mandatory email verification, with a rebuilt Withdrawal Center that tracks multi-signature approvals live.

Included updates:

  • Apex Platform (v0.1.16)
  • Fystack UI (v0.1.16)

New Features

Mandatory Email Verification

Sign-in now requires a verified email address.

Highlights:

  • A verified email address is required to sign in
  • The verification flow was hardened mid-rollout to close an email-enumeration gap, where sign-in behavior could reveal whether an address was registered

Redesigned Withdrawal Center

A rebuilt withdrawal list, detail view, and step tracker replaces the legacy withdrawal tracker, built for higher transaction volumes.

Highlights:

  • New withdrawal list, detail view, and step tracker
  • Live status polling
  • Clearer per-step progress

Multi-Signature Approval Tracking

Withdrawal details now show approval status for each signer as it happens.

Highlights:

  • Live approval status per signer on the withdrawal detail view
  • Policy rules can automatically bypass manual approval for withdrawals that qualify

See Approval Groups for how signers and thresholds are configured.

Wallet Balances and Overview API

New endpoints expose aggregated wallet data for integrators.

Highlights:

  • New endpoints for aggregated wallet balance and overview data
  • Withdrawal responses now include wallet details and approval counts

Analytics Permission Scoping

Analytics routes now sit behind a dedicated RBAC permission instead of being reachable by any authenticated role.

Summary

Apex v0.1.16 is the authentication and withdrawal tracking release:

  • Mandatory email verification on sign-in, with an email-enumeration gap closed during rollout
  • Redesigned Withdrawal Center replaces the legacy tracker with live polling and per-step progress
  • Multi-signature approval tracking shows each signer's status live, with policy-driven approval bypass
  • Wallet balance and overview endpoints plus approval counts on withdrawal responses
  • Analytics permission scoping puts analytics behind a dedicated RBAC permission