@cinemeta
Release Notes
Release Date: March 10, 2025
Version: Post-Audit Implementation
SECURITY
API Protection
• Tag Featured endpoint – Admin-only protection added. Previously anyone could tag projects as featured; now requires admin authentication.
• In-film rewards unlock – Rate limiting added (10 requests/minute per IP) to prevent abuse and brute-force attempts.
Smart Contracts
• FilmProject – Improved error handling in withdrawFunds(): unauthorized callers now receive a dedicated NotAuthorized error instead of a generic one.
PLATFORM UPDATES
Contract Upgrade
• All 5 FilmProject contracts upgraded to new implementation:
• Proxy addresses unchanged; no user action required.
Database
• Updated project_impl_address for all projects to reflect new implementation.
TECHNICAL IMPROVEMENTS
• Deploy script – Fixed bug where successful contract deployments were incorrectly reported as failures.
• Tests – Resolved TypeScript errors in envelope flow integration tests.
0 reply
0 recast
0 reaction