Changelog

What changed in Paya. Newest first.

2026-04-28

Light theme. System-preference detection plus a manual sun/moon toggle in the nav. Persists per browser.
DKIM auto-publish. A daily timer now syncs DKIM keys from the mail server into authoritative DNS, so signed mail actually verifies after rotation.
Mobile APK signed. The release APK now ships under the production keystore, not Flutter’s debug key.
Backups. Postgres paya database is now part of the nightly dump (was missed on initial provision).

Launch. paya.fund went live. Backend (paya-api, paya-relayer, paya-indexer) running as niso services on the VPS, behind nginx with Let’s Encrypt TLS.
Mainnet. All wallets and payments on Solana mainnet-beta. USDC mint resolves correctly per network.
Public payment links. /pay/{slug} renders a server-side HTML checkout page. Same for /i/{token} shared invoices.
TxShield pre-flight. Every payment is risk-screened before submission; sandwich, rug, and slippage protection on by default.
Audit hardening. CORS lockdown, KYC stub mode in production, mainnet-only RPC validation, Stripe test-key warnings.
Health monitor. https://paya.fund/api/v1/health is checked every 60 seconds.

Looking for the developer-facing API changelog? Subscribe to the API docs RSS or follow github.com/paya-fund.