Crassula Release Week 21

core v.26.05.11-26.05.12
client v.26.05.4-26.05.5

Improvements

Compliance

Added functionality to restrict user registration with temporary email addresses. Two new configuration options are now available: One allows blocking registration from custom email host lists defined in the configuration, while the second uses an automatically updated file containing known temporary email hosts. These restrictions do not affect user creation via the Administrative Panel or adding additional email addresses through the Banking Interface.

Fixes

Administrative Panel

Resolved performance issues on the Transactions page: Loading speed has been improved, and additional logic has been implemented to display available actions (such as edit and complete) on hover.
Implemented forced logout functionality for deactivated administrator accounts. If an administrator or agent account is disabled — either by another administrator or by the user themselves — the system now automatically logs the user out upon the next request.
Corrected administrator password change logic: Superadmins can now always change passwords, while regular administrators can only do so if they have the required permissions. Regular administrators are also prevented from changing superadmin credentials even if password change permissions are granted.

Fees

Fixed an issue where recurring fees for additional accounts were not automatically charged when the primary account was in GBP and the additional account was in EUR. The fee is now correctly deducted from a suitable mono-currency additional account instead of being silently skipped.

Transactions

Added cryptocurrency wallet address validation to prevent cases where users could mistakenly initiate transfers to their own Fireblocks accounts.
Fixed Travel Rule ownership verification logic for non-mirrored transactions. The system no longer calls unsupported Sumsub ownership confirmation methods for unhosted or unsupported VASP wallets and now correctly skips this step. Additionally, the resolver has been updated, and a migration for previously stuck transactions has been introduced, reducing unnecessary 400 errors and restoring processing of pending Travel Rule transactions.
Resolved issues with processing ADJUSTMENT transactions during import and webhook handling for the OpenPayd provider.
Improved processing logic for incoming transactions after verification via the ComplyAdvantage service. Previously, transactions could remain stuck in the Waiting for Action status after a Hard Stop followed by approval. The system now processes transactions automatically based on alert results: Non-Suspicious transactions are automatically completed, while Suspicious transactions are automatically declined and moved to the Refunded status. Additionally, removed the deprecated wait_on_reject configuration and introduced a feature flag for the Approve button.