CHANGELOG

Reliability & rate limits

• Toggling the extension off is now respected by tabs opened after the toggle — no more overlay leaking onto DexScreener / pump.fun tabs that booted while the extension was disabled. #562
• Client-side scan rate limit raised 10 → 50 per 60s to match the new server cap; power users opening 15–20 token tabs in a burst no longer hit a false gate. #561
• Per-user server limits bumped to 60 requests / 60s sustained, still keyed per install. #560 #561

Reliable tier sync on account switch

• The overlay’s Pro / Free badge now syncs reliably when you switch accounts — the in-flight scan is aborted before the cache clear + rescan, fixing the “stuck on the previous account’s tier” bug from v1.3.5. Session handling moved into its own module with a 7-case test suite.

Instant Pro / Free badge flip

• Logging in / out flips the tier badge in under 300ms (was 2–5s): logout swaps to Free with no API call; login hits the lightweight /api/quota endpoint before re-rendering. The full silent rescan still runs in the background to refresh price/score.

Clearer verdicts, honest flags

• Critical Flags grouped by severity; the AI summary now explains info-level signals instead of swallowing them. #525
• Positive signals (e.g. “LP burned”) hidden on RUG / DANGER verdicts to avoid a contradictory read. #527
• Pipeline status flags (e.g. “Helius unavailable”) removed from the user surface — engine internals only; reduced confidence is noted inline. #526
• Overlay shows clean display bands (250 / 500 / 750 / 1000). #544
• “Upgrade to Pro” buttons route to antaresscan.com/pricing via the website bridge (no install_id in the URL). #538 #539 #541
• Demo full-analysis renders fully-populated Deep Analysis tabs (Buy/Sell Flow, Wash Volume, Sniper Map, Exit Liquidity, Insider Watch) for PENGU / FARTCOIN / PIPPIN / HAWK. #553
• Scoring: pump_imbalance reclassified as a soft block reason; slow-rug chart pattern + 2 critical flags blocks SAFE. #549 #550

Pre-launch security hardening

• Five pre-launch security blockers closed after an external audit (6 independent sub-agent reviews): postMessage origin allowlist on the website bridge, XSS escaping for criticalActors.desc / exit-note, OPEN_TAB host whitelist, SESSION_SECRET fallback memoisation, and founder-grant emails moved out of source into env vars.
• Payment provider switched Solana Pay → NOWPayments (hosted checkout, 200+ cryptos) — the v1.3.1 work (never tagged) is rolled into this release.
• Full test suite: 1052 passing.

Deep Analysis redesign — 4 new tabs replace the originals

• Insider Watch replaces Timeline. Top 12 wallets in a colour-coded heatmap; each tile shows the wallet’s 6h delta + action (Accumulating / Holding / Reducing / Selling / Dumping). Dev wallet flagged with a purple ring. Wired to holderActivity.rows with criticalActors fallback and concentration-tile fallback when both are missing. #430
• Buy/Sell Flow replaces Holder Activity. Pressure-gauge hero with ACCUMULATION / DISTRIBUTION / BALANCED status driven by DexScreener pair.txns + pair.volume across 5min / 1h / 6h / 24h windows. Per-window mini cards. #430
• Wash Volume replaces Outcome Histogram. 0-100 wash score donut + 4 metrics (reported, real estimate, total trades, avg trade size, buy/sell symmetry). Pivoted off Solscan to DexScreener data so it works on every token with a pair. #430
• Sniper Map replaces Score Breakdown. Concentration retention bar showing top-10 holding share vs distributed float, plus sniper / bundle flag count. Uses Helius top-N with RugCheck fallback so the tab populates even when Helius is unavailable. #431
• Removed dead buildOutcomeHistogramTab and stale "Outcome Histogram is not available" user-facing string. Marketing copy across index / features / faq / compare / engine / about / terms / token updated to reference the new tabs.
• 980/980 unit tests pass + new live-API integration test against 4 real tokens (BONK / PENGU / TRUMP / TROLL) verifies all four tabs render with real data.

v5 backend wave — real data behind every section

• Critical Actors composer ships real per-token data: dev reputation (prior tokens, prior rugs), insider sniper position, coordinated cluster from insider-graph union-find. #321
• Verdict Timeline persisted in Redis ZSET vh:{ca}. Each scan appends a snapshot; the tab renders real verdict progression instead of a static bookend. 60s dedupe, 50-entry cap, 30-day TTL. #322
• Holder Activity tab now classifies last-60min on-chain activity per top holder (Holding / Selling / Buying / Splitting / Reducing / Static) from recentTransfers. Net-flow footer detects pre-dump signature. #323
• Outcome Stats — TTR ring + Outcome Histogram — powered by a heuristic profile matcher (fast-rug / high-risk / slow-death). Indicative; corpus-backed KNN matcher coming. #324
• TTR ring rendered only for RUG and DANGER verdicts (was previously also showing on CAUTION with misleading slow-death framing). #326
• Holder Activity tab shows honest empty-state when backend returns rows=[] instead of falling back to mock content. #325
• Cache prefix bumped antares:v3: → antares:v4: to invalidate stale results pre-dating the v5 fields.
• 34 new tests added (composers + Redis-mocked verdict-history). Branch coverage 74.6%.

v5 design + token page architecture

• Foldable, click-to-collapse sections everywhere (Critical Flags, AI Verdict, Security, Holders, Deep Analysis, Source Breakdown). #316
• Deep Analysis 5-tab widget — Timeline, Holder Activity, Score Breakdown (radar), Outcome Histogram, Exit Liquidity. #317
• SVG radar pentagon over 5 dimensions (LP / Holders / Trading / Maturity / Sources).
• Critical Actors preview with 3 cards (Dev / Insider / Cluster).
• Time-to-Rug ring in hero for RUG / DANGER verdicts.
• Source Breakdown accordion: per-upstream verdict (OK / Risk / Flagged / N/A) with one-line note.
• Custom inline-SVG tab icons replacing emoji glyphs.
• Glitch animation on the verdict h1; Ask-Antares FAB with contextual question pills.

Backend resilience

• Per-fetch deadline with graceful degradation when one upstream stalls. #275
• Runtime Zod validation for upstream GoPlus / RugCheck / Helius responses. #276
• Structured scan.outcome + scan.cache_hit telemetry. #277 #279
• Rate limiting can key on (IP, install) — closes shared-NAT quota starvation.
• GoPlus holder_count finally read — the field was already in the response, just unused.
• Asymmetric Redis cache TTL: bad verdicts cache long, young-token safe verdicts cache short.

Production hardening

• 7-source verdict (DexScreener, RugCheck, GoPlus, Helius, Solscan, Chart, CrossValidation).
• Safe Gate hard overrides on critical flags (LP open, honeypot, mint/freeze, deceptive name).
• 1000-point composite score with geometric mean + diminishing penalties.
• Wash trading detection via vol/liq ratio + Solscan transfer signature analysis.
• Chart pattern engine (parabolic / blow-off / staircase / wick trap / dead-cat bounce).
• Established-token bypass (30+ days, 50k+ holders, GoPlus clean) for legitimate blue chips.