Release Notes — May 6, 2025

Webhook security. We have strengthened webhook security — webhooks that cannot be verified are now rejected outright. No action is needed; this takes effect automatically.

API change (action may be required). The per-application onboarding token import endpoint has been removed. If your integration uses this endpoint, please reach out, and we will help you transition.

Sandbox. Transactions that exceed limits in the sandbox now show a Rejected status instead of Failed, which more accurately reflects production behavior during testing.