Bicrypto 6.0.9

7 January 2026

This release has upgrade notes. Read them before updating — they describe behaviour changes that need your attention.

BUG FIXSECURITYKYCAUTHTRADING

Core v6.0.9

Release Date: January 7, 2026 Tags: BUG FIX, SECURITY, KYC, AUTH, TRADING

Overview

Version 6.0.9 addresses multiple KYC verification issues, improves UI consistency, replaces Google reCAPTCHA with a custom Proof-of-Work captcha system, and adds AI Investment support to the Pro Trading layout.


Upgrade Notes

Step 1: Remove Deprecated Files

Run this command from your public_html directory to remove deprecated files:

rm backend/email/README.md \
  "frontend/app/[locale]/(dashboard)/admin/notification/client.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/components/channel-tester.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/components/dashboard-overview.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/components/health-monitor.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/components/metrics-panel.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/components/pwa-manager.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/components/queue-manager.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/components/settings-panel.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/loading.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/page.tsx" \
  "frontend/app/[locale]/(dashboard)/admin/notification/README.md" \
  "frontend/hooks/use-recaptcha.ts" \
  "frontend/app/[locale]/(ext)/admin/affiliate/condition/columns.tsx"

Step 2: Run Updator

pnpm updator

Upgrade Support

For assistance with migration or issues:


Added

Proof-of-Work Captcha System

Replaced Google reCAPTCHA with a custom, invisible Proof-of-Work (PoW) captcha system. This provides bot protection without any third-party dependencies or privacy concerns.

How It Works

  1. When a user submits a login, registration, or password reset form, the browser requests a challenge from the server
  2. The browser solves the challenge automatically in the background
  3. The solution is submitted with the form data
  4. The server verifies the solution before processing the request

Features

  • Zero Dependencies: No third-party services or API keys required
  • Privacy Focused: No user data sent to external services
  • Invisible: Users don't see any captcha UI - it works in the background
  • Configurable Difficulty: Choose between Low (~100ms), Medium (~500ms), or High (~2s) computation time
  • Rate Limited: Prevents abuse with per-IP rate limiting on challenges

Configuration

Navigate to Admin > Settings > Security > Protection to configure:

  • Proof-of-Work Captcha: Enable/disable the captcha system
  • PoW Difficulty: Set the difficulty level (Low, Medium, High)

Protected Actions

The PoW captcha protects:

  • User login
  • User registration
  • Password reset requests

AI Investment in Pro Trading Layout

Added full AI Investment support to the Pro Trading interface, bringing feature parity with the standard trading layout.

Trading Form Panel

  • Added "Standard" vs "AI Investment" tab toggle at the top of the trading form
  • Users can switch between standard order forms and the AI Investment form
  • Custom Pro-themed AI Investment form that matches the dark theme aesthetic
  • AI Investment tabs only appear when the AI Investment extension is installed

Orders Panel

  • Added new "AI" tab alongside Open, History, and Trades tabs
  • Displays all user AI investments with plan name, amount, profit, and status
  • Shows active investment count badge inline with the tab text
  • Cancel button for active investments
  • AI tab only appears when the AI Investment extension is installed
  • Auto-refreshes when a new AI investment is created

Fixed

KYC Page Crashes

Fixed issues in multiple KYC components that caused pages to crash due to internal rendering errors. Users can now navigate through KYC verification without encountering errors.

KYC Container Width

Fixed the KYC verification page container being too narrow on desktop screens. The container now properly spans the full available width.

KYC Button Text Color

Fixed white text on primary-colored buttons being difficult to read. Buttons now ensure proper contrast regardless of theme.

KYC Level Skip Logic

Fixed an issue where users couldn't progress past Level 1 if Level 2 was deleted/removed. The system now correctly detects and skips missing levels, allowing flexible KYC configurations without breaking user progression.

KYC Empty Level Form Prevention

Fixed an issue where the KYC form could render as empty when a level existed but had no fields configured. The system now shows a proper message instead of a blank form.

Fixed navigation in the KYC section to improve performance and maintain proper navigation behavior.

KYC Application UUID Validation

Fixed an issue where KYC applications would fail to submit with "Must be a valid UUID" error. The system now accepts all valid UUID formats.

KYC Application Details Dark Mode

Fixed missing dark mode styling throughout the KYC application details page. All components now properly support both light and dark themes including documents tab, progress bars, admin notes, loading states, and verification checks.

Email Template Layout

Fixed email templates displaying labels and values stacked vertically instead of side-by-side. Transaction rows now properly display labels on the left and values on the right, and stats grid cards display side-by-side correctly.

License Activation Form

Changed the license activation form to use optional email instead of required Envato username. Only the purchase code is now required.

Email Verification Prompt After Registration

Fixed an issue where the "Verify Your Email" prompt was shown after registration even when email verification was disabled in settings. The prompt now only appears when email verification is actually required.

Removed

Google reCAPTCHA has been completely removed from the platform. The new Proof-of-Work captcha system provides equivalent bot protection without external dependencies or privacy concerns.