Changelog

• Cities duplication in directions are now prevented.

• The “Payment Details” block is now open by default in the application card - making it easier to view key information without extra clicks.

• Updated the list of placeholders on the Web Notifications page.

• Faster city loading when creating or editing a direction.

• Fixed a bug where two extra spaces were added when saving a quotation.

• Added the ability to select multiple primary requisites for currencies when configuring additional (custom) fields.

• You can now edit the values of custom fields directly in the application card.

• When returning to the list after editing a direction, previously selected filters are now preserved.

• Updated color configuration for application statuses - the interface is now clearer and more visually appealing.

• Added a button to copy application information - currently copies only general information (without custom fields).

• Fixed an issue where the saved requisites page in the user’s personal cabinet would break if the currency those requisites belonged to was deleted.

• When copying directions in the new admin panel, cities are now copied as well.

• Added translations for blacklist categories - all categories are now available in multiple languages.

• Improved logging for easier system monitoring.

• Minor fixes and optimizations.

• New filter on the Users page - now you can display users with non-zero balances.

• In the new admin panel, a warning is shown if the request author is on the blacklist.

• Optimized saving of request data when Enter is pressed multiple times in a row.

• A new “Details” column has been added to the blacklist management page.

• Improved validation when linking cities in directions.

• Added the ability to upload multiple receipts at once – faster, more convenient, fewer errors.

• Removed integration with Perfect Money and all mentions in the documentation due to their closure.

• Fixed a bug with currency and direction sorting.

• Improved validation for bulk deletion of quotes when one or more are already in use in directions.

• Currency search now works by full name.

• Fixed request search by email.

• Merchant and currency category fields are now optional in the bulk editor.

• Plus a few minor improvements and fixes we’ve already forgotten. Looking forward to your feedback!

• Added bulk deletion of quotes in the new admin panel.

• Changed sorting of currencies and directions - now from newest to oldest. On the currencies page you can manage the sorting.

• Added error localizations in the admin panel for new languages: Spanish, Portuguese, Kazakh, and Turkish.

• A new filter has been added in the admin panel to display only active or only disabled directions.

• Added city search on the direction create/edit page - especially useful with a large list of cities.

• Exported requests now automatically generate a file with the site name.

• The description field for the quote group is now optional.

• When editing the feedback date, you can now save changes by pressing Enter (in addition to clicking the save icon).

• When changing a request’s status, confirmation can also be done by pressing Enter.

We’ve added AI-powered news generation right from the new admin panel! Now you can:

• Set a topic (or leave it blank) - and get a draft of the news in all languages activated on your website.

• Choose the image generation option.

• Edit the text or approve it right away - and in less than a minute you’ll have a high-quality, up-to-date news article.

• No limits on generation - the feature is already included in your monthly license fee.

• AI creates news faster than you can finish your coffee!

• New languages added: Spanish, Portuguese, Turkish, and Kazakh. When activating a new language in the admin panel, be sure to add translations for currency descriptions, email templates, and more.

• You can now change the time zone in the admin panel.

• Added the ability to change the manual auto-payout trigger code directly from the admin panel.

• On the city creation/editing page, you can now immediately link it to cash directions.

• In uploads, the most recently added files are now displayed first.

• Added a detailed description of how the Palette works.

• Brought back the option to add your own custom online chat script alongside simplified configuration for predefined providers.

• Fixed the display of popular directions in the admin panel.

• Added the ability to change access rights for all roles except the Administrator role.

• Applications now include a special flag indicating that it’s from a new client.

• Fixed the news editor in the admin panel.

• Added a new filter on the directions page - shows active directions with a rate of 0. Useful for tracking the correctness of external providers from which rates are parsed!

• Improved field validation and changed their order. Pay attention when configuring!

• Filter values on the directions page are now preserved.

• Now, to add a rate, simply press Enter, no extra clicks needed.

• Plus a few more useful bug fixes.

• Significantly improved User Verification page.

• On the Directions page, exchange rates are now displayed, along with a search function for quotes.

• Improved validation when copying directions.

• Added filters to the Admin Operation Log page. A separate button for viewing admin authorization logs has also been introduced.

• Enhanced interface when changing the request status.

• Added a confirmation window when recalculating a request from the admin panel.

• Fixed counters in the admin header for withdrawal requests, user verifications, and cards (icons are now displayed correctly).

• Multiple improvements to the client-side of the site in the base Lara template (available after the first installation).

• Improved AI-powered image generation when creating news.

• Simplified online chat configuration.

• Added quick navigation from the admin panel to the client-side of the site.

• Added “Getting Started” documentation.

• And several other minor improvements.

• Added the ability to change the favicon, logo, background, and color palette of the app directly in the admin panel. Recommendations for image formats and sizes have also been added.

• Added a “Role Management” page, where you can view role-based permissions (editing will be available soon).

• Optimized the quotes list: it now loads much faster and search works more smoothly.

• In the “Directions” table, you can now bulk enable/disable, copy, and delete directions.

• Updated the display of the directions and currencies page.

• Added a new “Export File” page with a description of what it is and a direct link to the XML file.

• Popular directions are now available directly from the “Directions” page and have been moved to the top of the menu for quick access.

• In orders, the Merchant order ID is now displayed in a shortened format (e.g., a93f7...0c92), and a quick copy button has been added.

• Updated the referrals page.

• Added a confirmation dialog when bulk deleting cities.

• And a number of other small but useful improvements.

• Ability to link a custom field to currencies directly from the settings page of that field

• Fixed inaccurate translations and texts

• Clear visual distinction for requests that have already been taken into work

• Ability to change quotations directly in the list of directions

• Drag & Drop on the Partners and Referrals page for convenient order management

• In banners, the link is now optional

• We have conducted testing and published a new security audit for August. We decided not to wait for the scheduled date and performed a full audit right after the release of the new admin panel. No critical issues were found, and all minor remarks have already been fixed. You can review the results here: Security Audit (August 2025)

• A new option has been added to the admin panel to enable or disable two-factor authentication at login. As you know, the 2FA code is sent via email. However, sometimes email providers experience outages, or you may simply forget to renew a subscription — in such cases, this option ensures that operational activity doesn’t get blocked. Our recommendation is to always keep 2FA enabled. See documentation for details.

• Fixed an inconsistent issue with short session duration in the admin panel. The active session time is now 6 hours, so you won’t need to log in again too often. If needed, you can adjust this value yourself.

• Added management of the IP whitelist in the admin panel. We recommend that clients protect their admin panel behind a Cloudflare firewall. However, that only provides protection at the network level. The IP whitelist adds an additional layer of protection at the application level, without reducing speed or convenience of use.

v1.4.0:

• For users who are on the blacklist, it is now allowed to create a request, but without generating payment details. This blocks payment and redirects the user to the chat for manual verification by an operator.

• In cases where generating a Whitebit code fails, the alerts now display the reason for the error.

• Fixed a bug when copying a currency with an invalid icon file type.

• The sitemap now displays with pagination. This significantly reduces the loading time of this page and also decreases the effectiveness of DDoS attacks.

• Fixed the formula for calculating the percentage when setting the rate on the directions page. Now: new_percentage = desired_rate / quoted_rate.

• For directions where the merchant is an e-wallet (AdvCash USD/EUR, Payeer USD/EUR), the actual payment amount is now automatically retrieved, equal to the payout amount including the commission.

• Added financial automation for the Oasis merchant — in the admin panel, the actual payment amount is now automatically retrieved.

• In the request export, profit is now calculated regardless of whether the “commission” field is filled in.

• When activating a code via the Telegram bot Helper, the value “WB” is now automatically filled in the “Payment system” field of the request.

• Fixed a bug that prevented auto-payouts through the Heleket provider.

• Fixed a bug that prevented a user from creating a request in specific cases when the Telegram username field was left empty.

v1.3.0:

• Added support for a new SMTP provider — turboSMTP.

• Added a public order identifier(Public ID) that is shown to the client instead of the internal ID. This is a security measure to hide the actual number of created orders and prevent their tracking. In the admin panel, both identifiers are now displayed, while on the website and in emails to the client only the Public ID is shown. All existing orders have been assigned a Public ID.

v1.2.2:

• Added a validation message when a user’s payment details are not found.

• Fixed a bug that sometimes prevented complete deletion of directions.

v1.2.1:

• Fixed a bug in the admin panel that prevented saving a category.

• Fixed an issue where an unverified user could create a request for a direction that requires mandatory verification.

v1.2.0:

• Added integration with PayPlay merchant.

• Added ability to launch your own Telegram Mini App for customers making cash exchanges.

• Optimized the exchange aggregator parser to reduce the number of external API requests. The parser now works more reliably with lower server load.

• All clients have been automatically updated to the latest version of the script.

v1.1.0:

• Added monitoring for the appearance of new cities on popular exchange service aggregators.

• Updated Gaps bot logic: if your exchange service ranks in the top 3 — an additional notification is sent.

v1.0.1:

• Bug fixes in the new admin panel.

• Split the payment provider Karbovanets into Karbovanets UAH and Karbovanets KZT on the auto-payout modules settings page.

v1.0.0:

• The admin panel has been redesigned with improved UX and UI. For the convenience of our clients, the option to switch back to the old admin panel will remain available for several weeks to allow time for adaptation.

• Added a feature for automatic news creation powered by generative artificial intelligence.

• The update is currently available in test mode for several clients. We plan to open access for everyone later this week. Stay tuned!

v0.5.6:

• Gaps Bot: rate deviations are now calculated more accurately. The exchange-gap-alert library has been updated — from now on, the `rankrate` field from the Bestchange API is used instead of `rate`.

v0.5.5:

• Fixed the behavior of the “Do not notify” button in the Gaps Telegram bot.

• Updated the exchange rate calculation logic.

v0.5.4:

• Fixed an issue where, in some cases, it was impossible to create a request without a Telegram username.

• Resolved a crash in the admin panel that occurred after creating a quote with an incomplete formula.

v0.5.3:

• Improved the Gaps Telegram bot — notifications are now interactive.

• Added a “Do Not Notify” button to each notification with the option to mute for 1, 6, or 24 hours or 7 days.

• Instead of comparing only with the top offer, the system now calculates the average rate based on the top 15 offers for more accurate rate gap detection.

v0.5.2:

• Fixed a bug where, after creating a new role, the user couldn’t see the menu items assigned to that role.

v0.5.1:

• Fixed a bug where it was possible to initiate the order creation process without specifying a city.

• Removed auto-generated directions with XEM coin.

v0.5.0:

• Integrated a new email provider SendGrid for sending emails via API.

• Added the Gaps Telegram bot to monitor your exchange directions on aggregators and notify when your offer significantly exceeds the nearest competitor.

• Fixed an error when selecting the “city not in the list” option during cash order creation.

• Fixed city display in emails for cash orders.

• Fixed incorrect user language detection when creating a cash order.

• Fixed logic for marking an order as paid for directions where this is not applicable.

• Fixed quotations for the TUSD stablecoin in auto-generated directions.

v0.4.1:

• Fixed validation in quote formulas — spaces are now allowed in expressions.

• Integrated Mailtrap API for sending emails. This helps bypass SMTP port blocks by hosting providers and prepares for support of additional email providers.

v0.4.0:

• Added a new “Desired Value” column on the directions page to help calculate the % profit per direction.

• When copying a direction, the city is now automatically copied as well.

• Introduced a new [cash]...[/cash] shortcode for emails related to cash orders — configurable via email settings.

• Added HTTP headers to prevent XSS attacks and enforce HTTPS.

• Nginx updated to ensure error pages no longer display extra technical information.

• Blacklist automation updated: all fields are now required and payment details are validated automatically.

• Fixed the 429 “Too Many Requests” error when working with the Whitebit API.

v0.3.2:

• Added support for sending emails via Mailtrap — enabling convenient testing of email campaigns in a secure environment.

• Implemented license verification for Lara via Telegram bot.

• Disabled cities are no longer displayed on the order creation page, reducing selection errors.

v0.2.33:

• Added a retry mechanism for AutoBuy after AutoSell if the initial AutoBuy attempt fails due to insufficient stablecoin balance.

• AutoBuy status can now be monitored directly in the admin panel.

• Fixed the calculation of “Rewardable profit” on the referrals page in the admin panel.

v0.2.32:

• Fixed an issue that may occur when saving the quote through the quick editor.

• Added a new field "Rewardable profit" on the referrals page in the admin panel. This field displays the value from which the referral profit is calculated.

• Fixed an issue where it was impossible to delete a currency because it was associated with a direction that had already been deleted.

• Fixed an issue where custom fields and annotations were not copied when duplicating a currency.

• Now, all language versions of news can be edited on a single page in the admin panel, instead of three separate pages.

• Fixed an issue with potential city duplicates. The city code is now unique, and duplicates have been merged into one unique city.

• Fixed an issue in the bulk editor where, if no currency was selected, all directions applied the entered percentage.

• Added a label for auto-generated direction orders. (See screenshot)

• Fixed an issue where a user could mark an order as paid for directions that had a merchant (except for the "static wallet" merchant).

• Implemented user lockout after three failed login attempts to the admin panel.

• Fixed an issue where it was possible to create a formula like "Whitebit:USDC_USDT * ", which caused incorrect system behavior.

• Fixed an issue where it was not possible to create a popular direction, even though it had existed.

• The "category" field for currency is now mandatory for filling out.

v0.2.29:

• We are changing the logic of the auto purchase bot.

v0.2.30:

• Added the ability to edit trading commissions via admin

v0.2.28:

• Fixed an issue where the language in which the user created the request card was not displayed if they opted out of data storage

v0.2.25:

• Sync currency 'min_amount_usd' for zombie mode

• Sync currency 'amount' for zombie mode. Disable all 'auto_generated' directions for zombies

v0.2.26:

• Handle missing 'merchant_network' for currencies which support multiple networks

• Report crypto to crypto | Part 1

• Fix auto generated directions duplicate action

• Fix N+1 Query issue on /api/directions/currencies

• Add user lang and localized emails

• Set min max amount from karbovanets

• Handle pre-set total_amount_usd_in

v0.2.27:

• Added import of quotes

• A new column "Autogenerated direction" appeared in the export file for orders

• Fixed an error when the copied direction was marked as autogenerated

• The user's language is now displayed in the order card

• Added localization of email messages

• Fixed an issue with auto-buying, when the bot crashed into an error if the actual amount of crediting was shown for the order

• Expanded support for Cryptomus

v0.2.23:

• Fixed all known bugs with WB code generation: The code was not generated due to slow VB balance updates. Fixed incorrect logic for checking whether the time period for VB code generation is currently valid

v0.2.24:

• Added the ability to enable/disable auto-generated directions via the admin. The corresponding buttons can be found on the all directions page

v0.2.21:

• Fixed an issue where a significantly larger number of coins were purchased when auto-purchasing coins with a flexible withdrawal fee

v0.2.20:

• The "Request amount in USD is greater than" field in Currency will be taken into account when calculating the minimum exchange amount only when the currency acts as the "Receiving" currency

v0.2.17:

• Added support for coin payouts using memo

• Fixed incorrect rounding of WB code amount that resulted in an error

• Fixed an issue with default value for annotation_from field in currency_langs table during merchant_description bulk editing

• Optimized console commands

• Configured NGINX to limit browser cache for static files

v0.2.13:

• Greater accuracy in calculating the rate. Because some coins with a large emission and a very low rate, the rate has an accuracy of 16 decimal places instead of 8.

• Added metrics to track orders created in auto-generated directions. The following metrics have been added: number of orders created for auto-generated directions, number of orders executed for auto-generated directions, USD amount of executed orders for auto-generated directions.

• Zombie mode: Changing coefficients in the admin panel. Added the ability to change the coefficients for min, max through the admin for zombie sites.

• Zombie mode: Automatically add KarbovanetsPublic quotes. A cronjob has been written that generates directions for all possible coins for reception that are on Whitebit.

• Transfer all order information to the Karbovanets auction.

• Add column referal in reports.

• Admin panel: inline update for currencies & directions min/max amounts.

• Ability to enable/disable cities. Added the ability to disable and enable certain cities. No need to delete a city. No need to disable a city in each direction. The corresponding function is displayed in the cities section - /root_panel/cities.

• Fixed a bug that could cause applications to be deleted along with referrals

• Added the ability to filter users by balance in the admin

• Fixed a delay in updating banners after saving in the admin

• Fixed a delay in updating partner information

• Implement WB Crypto AutoBuy

• Ability to turn cities on/off

• Security Enhancements

• Strengthened the Auto-Withdraw page's security

• Secured the Merchant page to protect sensitive data

• Improved Admin Panel Login security to prevent unauthorized access

• Resolved issues with 2FA functionality

• CD (Continuous Deployment) security fixes, now utilizing GitHub Secrets for sensitive information

• Login Email Notifications: Users now receive email alerts on login events

• Auto-Sell Option: Automatically transfer all incoming deposits to your trading balance

• Introduced a new action in the Request API to handle batch updates for city coefficients and fixed rates in directions

• Add rate limits for recurrent events

• Add console command to check host server was not blocked in Binotel admin panel with alert in Slack (new env var)

• Add manual/auto directions in rate file

• Disable MySQL binlog in Docker config

• WP migration import class improvements

• Fix “CleanupDirectionCitiesFixedRates” command

• Update GitHub workflow YAML

• Fix bulk editing for exchangers in zombie mode

• Add caching for Binotel settings in /api/general-info; add cache response header X-Cache-Status; fix caching when lang is not passed

• Add ExmoRateProvider

• Add tooltip for possible placeholder values on currency edit page

• Increase rate precision to 6 symbols when sending request to Karbovanets Auction

• Set MySQL max connection to 200

• Add disable auto sell option for direction

• Add possibility to set new status PARTIALLY_PROCESSED_AUTO_WITHDRAWS in admin panel

• Fix Redis replica issue

• Order create requisite bugfixes

• Add base_currency to Requisite resource

• All directions set to be disabled by default after batch copying process

• Prometheus product metrics

• Added subordinate mode feature for exchanger

• Proxy support for Binotel chat provider

• Added new automatic payout provider: Karbovanets auction

• Added localization for emails

• Technical and few product metrics in Grafana

• Automatic city selection fix for cash directions

• Added requisite verification feature

• Added order receipt feature

• Allow order transaction hash manual edit

• Added bulk edit for merchants

• Added bulk edit for auto withdraw provider

• Added new status PARTIAL PROCESSED AUTO PAYOUT

• Added automatic DDoS protection for most popular attack strategies

• Added localization for partners

• Custom fields validation fixes

• Improved PM auto payout

• Optimized rates file generation time (200+% increase in performance)

• Added localization for custom fields validation errors

• Added manual requisite logic

• Added 3 new merchants: PerfectMoney, Volet, Payeer

• Added memo management

• Increased general performance (120+% optimization on most use-cases)

• Added localization support for reviews and banners

• Highlighted reviews

• Merchant filtering in mass editor

• New WB auto sell bot with limit orders and manual configuration

• Fixed Copy direction button.

• Removed max_amount field in city_direction entity.

• Added integration with Whitebit coin auto-sell bot.

• Added localization in admin panel. Now admin users can change language of interface in their profile settings.

• Added possibility to set description for specific merchants individually or with batch edit action.

• Added possibility to set/update online chat script via settings in admin panel.

• Added function to manually change referral user bonus.

• Updated commission for Whitebit merchant in automatic withdrawal processing.

• Added Telegram bot with mini app feature for admin users. Now you can fully manage your website in Telegram app window with no need to install any third-party application.

• Added filter and search by title on SEO page.

• Added URL field on banners page.

• Deleted duplicated display_name field for currency entity.

• Added status selection when automated order workflow will be triggered.

• Updated Whitebit merchant logic: use cronjob instead of webhooks to reduce awaiting time.

• Don’t react to spam transactions for addresses generated by Cryptomus merchant.

• Optimized directions page in admin panel (decreased loading time up to 50%).

• On page Rates in admin panel, users can now create their quotes linked to external sources of rates in XML format.