Patch Notes

Phone 2FA is live. Users can now enroll a phone number under Settings → Security. Firebase sends a real SMS verification code — enter it to enable two-factor auth on your account. Supported on all sign-in methods (email, Google, Twitter, GitHub, Facebook). Accounts with phone 2FA get a challenge prompt automatically on every sign-in.

Authenticator app 2FA is live. Scan the QR code in Settings → Security with Google Authenticator, Authy, or any TOTP app. Disable any time by entering your current 6-digit code. TOTP is fully server-side — secrets never leave Firebase Cloud Functions.

TOTP Cloud Functions were deployed as 2nd Gen, which the Firebase compat SDK (v9) doesn't pass auth tokens to — every call returned functions/unauthenticated. Redeployed as 1st Gen. Also fixed a key mismatch where the frontend expected result.data.qrUrl but the function returned result.data.qr.

Damage rate displayed on boss card. Every boss now shows exactly how much damage your actions deal — e.g. "⚔️ 1 quiz completed = 5 dmg" — so you always know the most effective way to contribute.

Boss preloader. The active raid boss is now silently loaded on sign-in, before you ever open the Raid tab. Previously, poll voters and other users who never visited the Raid tab had their contributions silently dropped. Fixed.

More damage metrics. Bosses can now use any of 16 action types to deal damage: quiz completions, flashcard sets, Timechain TV watch time, Bitcoin Beats listen time, poll votes, forum posts, trivia correct answers, topic reads, new topics visited, badges earned, 7-day streaks, Lightning tips sent, chat messages, and total XP earned.

XP-based bosses now accumulate damage in a 100 XP buffer before firing a contribution call. Prevents fractional damage values and reduces Firestore writes during rapid XP gains.

Lightning Network capacity showed NaN — caused by calling fmtNum() on a value already converted to a formatted string. Fixed the calculation chain; capacity now shows correctly (e.g. "5,342 BTC").

Dashboard cache bumped to v2 — clears stale null values that were persisting from a prior bad fetch and showing blank tiles on return visits.

Indicator count corrected to 32 — the count previously excluded indicators with no flash logic, making the displayed total inconsistent.

Live candlestick chart — 5-minute OHLCV, 20 bars, on the Bitcoin Network dashboard. Last candle updates every second with live trade price.

Real-time price WebSocket — Coinbase Exchange aggTrade stream fires on every individual trade (multiple times/second). Price tile, candle, and 24h High/Low all update live.

Dashboard API proxied through Cloudflare Worker. 1,000 users opening the dashboard simultaneously = 1 upstream API call, not 1,000. All data (price, hashrate, fees, mempool, candles) fetched server-side and edge-cached for 90 seconds. Rate limiting from CoinGecko, Binance, and other external APIs is eliminated entirely.

Dashboard crashed on second open — halvingEta was stored as a Date object but JSON-serialized to a string in localStorage. Calling .toLocaleDateString() on a string threw, breaking the entire render for returning users.

Supply, Market Cap, ATH, and ATH drawdown no longer show — — CoinGecko rate-limits Cloudflare IPs. Supply now computed directly from block height (exact formula). Market cap derived from price × supply. ATH uses a hardcoded fallback (08,135, Jan 2025) if CoinGecko fails.

4 Top Indicators (Fear & Greed, ATH Drawdown, NVT Ratio, BTC Dominance) were silently skipped when their data wasn't available on first load — all now always render with "Loading..." placeholders. Indicator count is stable at 31.

Candlestick chart axis labels increased to 12px — previous sizes (8.5px Y-axis, 7.5px X-axis) were unreadable on most screens.

Timechain Calendar iframe restored — timechaincalendar.com was dropped from frame-src when the SEO router CSP was rewritten.

Trivia vote totals update immediately after answering. Previously showed "1 answer today" (just your own vote) until you switched tabs and came back. Now chains a real Firestore read after the write and patches the DOM directly.

Poll vote results show correct community counts instantly after voting. Was using get({ source: 'server' }) which raced against the just-committed transaction. Removed the server-source override — Firestore's local cache already had the committed data.

Chat & Satoshi's Favor now load instantly for returning users. Previously these loaded last — buried in batch 7 of a staggered queue that didn’t even start for up to 5 seconds. Now: if you’ve logged in before, both scripts inject the moment the page loads, before anything else. Cold-start wait also reduced from 5s → 3s for everyone.

Difficulty lowered to 20,000 — odds now 1:5,000 (~0.02% per hash). Easier to find a block. 🎰

Difficulty History table: frozen hashes (16,200) and luck (61.7%) for the 2026-08-20 era — previously showed "--" after the era ended since live data no longer loads for past rows.

Gold market cap updated to 222,600 tonnes — sourced from World Gold Council Q2 2026 data.

SatoABC Bitcoin wallet safety guide added to the Self-Custody learning channel.

Poll vote count now updates immediately after voting — previously showed "1 answered today" until you switched tabs and came back. Fixed by forcing a server-side Firestore read instead of hitting the local cache.

XP notification now reflects the actual amount awarded by Cloudflare (post daily cap), not the eager pre-cap estimate. No more misleading +XP toasts.

Nacho's body color restored to his signature brown (#d4956a) — briefly went off-model, now correct.

Patch notes link added to homepage footer — now permanently accessible from the main app.

Instant login — returning users now render from a local profile cache in under 100ms. Chat, leaderboard, and all user features are available immediately without waiting for Firestore.

Message editing — tap ✏️ on any of your messages to edit it. Posts show (edited) label. Each message allows up to 2 edits.

Bulk raffle entries — use the quantity input to buy multiple entries at once. Enter 10 to spend 100 🎟️ and get 10 chances in one click.

CLCT Auctions tab — Bitcoin collectibles & auctions shop added between Conduit Market and Scarce City. Opens at clctibles.com.

Upgraded to Meta Llama 4 Scout 17B — smarter, faster responses from Nacho's AI.

+751 videos added across 11 stations — library now at 7,689 videos. All durations verified via YouTube API.

Firestore rules updated — chat edits locked to message owner only, max 2 edits enforced server-side.

Peers section consolidated into Account tab as collapsible panel

YouTube embeds restored, forum upvote counter, threaded replies to article comments

24h high/low price now always fetches fresh data on dashboard open

ppq.ai AI Tools embed restored and whitelisted in CSP

Faction badge now displays dynamically from your profile

Proof of Walk temporarily disabled with informational toast

Lightning Mart tabs restructured and renamed for clarity

Tipping fallback — failed LNURL fetch now shows correct "Copy Lightning Address" UI

Raffle winner announcement now shows @username mention in Global Chat

New Nacho SVGs, quiet mode, squash-and-stretch animations, donate modal fade

18 ring accounts had withdrawals disabled

Visits counter Firestore rules fixed for fingerprint-based writes