CHANGELOG
Every Change, In The Open
A complete record of every fix, feature, and security patch shipped to ADA Harvest — 143 commits and counting. Security issues we discovered and patched are tagged in red.
June 4, 2026
11 changes
Feature
public /changelog page listing all 142 commits with category tags
8b66270 Fix
mobile horizontal scroll — overflow-x hidden on body + wrap flash loan stats
8037a71 Security
fix value-stripping + stake-redirect + shutdown gate; add public Security Changelog page
9d36f05 Security
fix 2 critical drain vulns (mint/burn enforcement + double-satisfaction)
3932ea5 Fix
portfolio P&L was wrong — counted withdrawals as losses
510fed3 Security
enforce real lovelace movement in Deposit/Withdraw + GUI hardening
1b79cc0 Feature
compound_rewards.py + update vault address in FAQ/Security to 267bfd2f
e677256 Feature
add CompoundRewards redeemer — staking rewards raise NAV per hvADA
f6864f5 Fix
accurate staking-reward wording
065d2ea Fix
site-wide accuracy pass — remove all unverifiable claims
d406c48 Feature
vault now delegates to VIPER — restore accurate staking claims
e134612June 3, 2026
2 changes
Fix
remove all staking claims — vault is enterprise address, no delegation
0bd56c3 Fix
remove all false claims — only advertise what actually runs
1441e5cJune 2, 2026
39 changes
Fix
homepage contrast + accurate claims
9206a96 Fix
dashboard loading stuck + portfolio shows real hvADA balance and P&L
296686b Fix
deposit polling loop causing 10 refreshes/sec after submission
c2ce0ed Fix
update frontend public plutus.json to new secured vault (cbc5160d)
654fdab Fix
deposit modal — clearer fee explanation, honest income sources (no fake APY guarantees)
fc4d1c1 Fix
Lace 'No account found' error message + wallet install links for Yoroi/Lace/Eternl/Nami
5249019 Security
bind Docker ports to localhost only (4000, 5432)
79fe85b Security
fix critical vulnerabilities before TVL growth
b90a8a4 Fix
remove duplicate getInfo() in api.ts — broke Cloudflare build
4d95741 Fix
BarChart3 does not exist in lucide-react 0.294, replace with BarChart
3293227 Fix
Bolt import error breaking Cloudflare build + async in non-async function
abd659a Fix
healthcheck wget, Telegram 409 on restart, Koios 403 noise
671345d Feature
rebuild dashboard — vault UTxOs, flash loan activity, income sources, no protocol yields
1c58332 Feature
flash loan migration to new vault + Python sample docs
76f0d20 Feature
compact AI council page, flash loan landing section, updated homepage copy
8b02d8f Update
Flash loan UI: activity feed on dashboard + landing section + SDK package
e45f712 Update
Dashboard: remove Protocol Yields table — not live yet, was misleading
ccdd6fb Fix
Fix: set hostname=backend-mainnet so Cloudflare tunnel can resolve it
090e5b2 Update
Frontend: live vault data, where-money-is, council history, flash loan UI
9de5bda Update
Recompile vault as PlutusV2 for lucid-cardano compatibility
b59e3bf Fix
Fix network name so compose reuses existing bridge network
a7117fd Update
Telegram notifications for every council vote and on-chain tx
37ddf77 Update
Simplify to mainnet-only docker-compose; mount seed file read-only
d751ceb Update
Add env_file to all backend services so all .env vars reach containers
2c90de8 Fix
Fix DB connection: use DATABASE_URL when set (docker-compose sets it)
b466f45 Update
Retry DB connect 5x at startup to handle race with DB container
a29b446 Fix
Fix governance-params load: run after confirmed DB connect
6a81b31 Fix
Fix stray closing brace in governance-params.ts
fd77b2e Update
Debug governance-params error type
d1953ee Update
Improve governance-params error logging to diagnose DB failure
3580976 Fix
Fix governance-params DB access; add public query() to DatabaseService
7c507c1 Fix
Fix: add flashLoanCapPct to getFlashLoanTerms return type
3a5afaa Update
AI council now governs real parameters; governance-params wired throughout
0ad73da Update
Add flash loan section to landing page and arbitrageur docs
44c1dca Fix
Fix plutus.json path: prefer dist/contracts/ at runtime
85212b2 Fix
Fix: copy src/contracts JSON files into production Docker image
7075357 Update
Add flash loan support (contract + off-chain + SDK)
da46875 Update
Add broadcastAlert to TelegramBotService; wire up new schedulers in index
0f84c4c Security
Fix 10 security vulnerabilities found in code review
becd4dcJanuary 3, 2026
19 changes
Update
Expand yield pools and show allocation snapshot
db0e279 Update
Add pool snapshots for AI council
80e34d4 Fix
Fix portfolio address decoding
e36bbd7 Update
Raise rate limits for chain and vault endpoints
1567524 Update
Include feasibility in Telegram AI council messages
6d003d8 Fix
Fix AI council log JSON storage
dadbaf2 Update
Relax AI council log rate limits
d00cd72 Update
Handle AI council log rate limits
c5df7e5 Update
Log feasibility and execution status in AI council
fabdf6e Update
Improve AI council summaries and feasibility gating
a020b96 Update
Merge branch 'main' into live
c0baf96 Update
Add rebalance feasibility gate and protocol endpoints
7a6e950 Update
Merge branch 'main' into live
9cb5f80 Update
Improve post-deposit UX and portfolio tx loading
13f7ec0 Update
Merge main into live
cc8347d Update
Clean up env handling and scripts
33de9d6 Update
Store AI council logs in Postgres
4246d38 Fix
Fix mainnet vault script address
1742c61 Fix
Fix mainnet vault script address
669bf32January 2, 2026
28 changes
Update
Merge branch 'main' into live
a98ef36 Update
Update mainnet vault address
a0ea0c3 Update
Update mainnet vault address
9b77605 Update
Merge branch 'main' into live
1a29615 Update
Remove contract debug logging
5882f05 Update
Remove contract debug logging
8a6a990 Update
Merge branch 'main' into live
0d55538 Fix
Fix contract debug script type
c4cefb1 Fix
Fix contract debug script type
a4aef80 Update
Merge branch 'main' into live
27567f4 Update
Log derived vault address in contract debug
e89756d Update
Log derived vault address in contract debug
410171f Update
Merge branch 'main' into live
1eee612 Update
Log contract blueprint hashes on app start
bf3527c Update
Log contract blueprint hashes on app start
e01dfe5 Update
Disable caching for contract blueprint
3d22c7c Fix
Fix Koios path handling and add favicon
3a7edd4 Update
Refresh contract blueprint hash and bust cache
b038dca Update
Bust plutus blueprint cache in frontend
0469f23 Fix
Fix fee estimate parsing for core-csl
18f26b4 Fix
Fix fee estimate parsing via core-csl
0c16a67 Update
Show fee estimation spinner on deposit
a040d4d Update
Require fee estimate before enabling deposit
e04c4e5 Update
Show dynamic deposit fee estimate and scrollable modal
35570de Update
Add deposit spend estimate warning
ae39b26 Update
Update vault script hash to mainnet deployment
0858ee6 Update
Clarify vault contract env usage in settings
d1f2c38 Update
Add rebalance services and update mainnet deployment
4dee36bJanuary 1, 2026
21 changes
Update
Support network-specific protocol config
db5923d Update
Add protocol config and defer Mesh SDK loading
83a659e Update
Merge branch 'main' of https://github.com/upggr/ada-harvest
a4b4c3e Update
ff
a8ef5a5 Update
Merge pull request #2 from upggr/preview
0acb7fc Update
jj
5688b31 Update
Merge pull request #1 from upggr/main
a60a6cc Update
jj
bef4495 Update
council
1412413 Update
Wire on-chain withdrawals and improve modal
8bb580f Update
Update dashboard balances and close deposit modal
c1dcd51 Fix
Fix script encoding and inline datum usage
14fdd97 Update
Surface wallet submit errors
161f62c Update
Add explicit collateral selection for deposits
ee7ff79 Update
Proxy chain data for mesh fetcher
6a98b99 Update
Provide Koios fetcher for deposit tx
a66ac6b Fix
Fix vault datum parsing for deposits
6ab9dfc Fix
Fix deposit build decoding
a68e128 Update
Wire on-chain deposit transaction
281e574 Update
Redeploy preview vault contract
b69ad43 Update
Add hvADA policy scaffolding and vault blueprint export
8a1cf1bDecember 31, 2025
22 changes
Update
Remove unused AI envs from compose
c8df56c Update
Add vault state endpoint and multi-backend compose
ab908b9 Update
Wire settings to wallet and use contract balance stats
48d9304 Update
Gate wallet by network and remove mock dashboard data
5f34345 Update
Add Next.js env typings
1f2601e Update
Force libsodium-wrappers-sumo CJS entry for Next build
499ba8f Update
Add frontend lockfile for Cloudflare build
9a0a183 Update
k
d0b6372 Update
μ
e40163a Update
Integrate real Mesh SDK wallet connection and fix routing
e8479aa Update
j
c129965 Update
Add Portfolio and Settings pages
c20f9ea Fix
Fix deposit input text visibility
5a49626 Fix
Fix Telegram bot /balance command to show wallet balances
f0f7ef8 Update
Add CORS_ORIGINS to docker-compose backend environment
2aec93d Fix
Fix trust proxy setting for Cloudflare Tunnel
5920402 Update
Disable healthMonitor temporarily in telegram bot
ce02605 Fix
Fix remaining TypeScript build errors
5a661dc Update
Update package-lock.json with @types/pg
debba8c Fix
Fix TypeScript build errors - add @types/pg and relax strict mode
f6f0292 Update
Trigger Cloudflare Pages rebuild
12e090a Update
kkk
032d716December 30, 2025
1 change
Update
Initial commit
da1a9a5The source code is open. For the raw git history and full diffs, see the GitHub repository . For a curated summary of security work, see the Security page.