Changelog

All notable changes to PayzCore, SDKs, and integrations.

---

v1.0.1 — Security Hardening

March 2026

Breaking Changes

• Webhook signature format changed: HMAC now covers timestamp + "." + body instead of body only. All webhook handlers must be updated to include the X-PayzCore-Timestamp header in signature verification. See Webhook Verification.

Security

• TOTP 2FA: per-user salt replaces static salt for secret encryption
• TOTP: removed legacy fallback decryption path
• Webhook: timestamp binding prevents replay attacks (Stripe-style pattern)

SDKs Updated

• @payzcore/node v1.1.6
• payzcore (Python) v1.0.2
• payzcore/payzcore-php v1.0.2
• n8n-nodes-payzcore v1.1.11

All SDKs now require the timestamp parameter for webhook verification.

---

v1.0.0 — Initial Release

February 2026

PayzCore's first public release. Non-custodial stablecoin transaction monitoring API with SDKs, CMS plugins, and automation integrations.

Core Platform

• Dashboard with real-time payment monitoring, analytics, and global search
• REST API with OpenAPI specification at docs.payzcore.com
• 5 networks: TRC20, BEP20, ERC20, Polygon, Arbitrum
• 2 tokens: USDT and USDC (USDC not available on TRC20)
• HD wallet derivation (watch-only xPub, BIP-44)
• 4 address modes: per_payment, per_user, dedicated, pool
• Pool matching: micro_amount (auto-offset) and txid (customer submits tx hash)
• Webhook notifications with HMAC-SHA256 signatures and retry logic (5 attempts)
• Plan-based access control with Free and Pro tiers
• Email verification, TOTP 2FA, Cloudflare Turnstile
• Telegram bot notifications with per-event configuration
• Analytics dashboard with volume, status, network, and token charts
• Per-project dust filter (minAmount setting)
• Protection Key webhook security
• Rate limiting with daily plan counters
• Payment Links — shareable URLs for no-code payment collection (fixed or open amount, buyer info fields, store branding)

SDKs

• Node.js — @payzcore/node on npm. TypeScript, zero dependencies, ESM + CJS
• Python — payzcore on PyPI. Python 3.9+, httpx-based, Flask and Django examples
• PHP — payzcore/payzcore-php on Packagist. PHP 8.1+, PSR-4, Laravel examples

CMS Plugins

• WooCommerce — WordPress 5.8+, WC 7.0+, HPOS compatible
• WHMCS — v7.x and v8.x, invoice auto-credit, multi-network selector
• OpenCart — 3.x, OCMOD installer, network and token selection
• XenForo — 2.2+, payment provider integration, phrase-based i18n
• Shopify — Express.js app, OAuth, multi-network checkout

Automation

• n8n — Community node with triggers and actions
• Zapier — Triggers, actions, and searches
• Make — Modules, webhook trigger, and connection

API Endpoints

Webhook Events