Fixed2
Credits returned from an upload that never finished could come back with a longer life than they had. A return now restores the time they had, never more.
When a reservation registered storage but never finished, the weekly clean-up returns the credits a week later. If the original bundle had expired by then, the returned credits were re-issued with the time the bundle had left at the moment of spending, counted from the day of the return, so a 28-day bundle could end on day 34. The re-issue now ends when the original bundle would have, and only a bundle that already ended gets the 7-day floor. Credits themselves are unchanged.
Credit-paid pieces larger than about 529 MiB failed to register; the tip the pool pays the upload relay is now bounded by the piece's size instead of one fixed figure.
The relay charges by encoded size, and the fixed 0.1 SUI limit sat below that charge for large pieces, so those uploads stopped with a server error. The limit now grows with the piece and stays about four times the relay's current price at every size, so a relay that quietly raised its price is refused before anything is signed and the credits come back in full. Wallet-paid uploads are not involved.
Security1
The Bluefin swap now calls only the contract address built into NMTS, not one a public Sui node reports.
Before, the app trusted the address a public node reported, so a node giving a false answer could have sent your swap into someone else's code; anyone who swapped WAL and SUI through Bluefin in the app or the command-line tool was exposed, no such node was observed and no loss is known. The address is now a build constant checked against the chain before a quote is shown. If that check fails, the Bluefin option disappears instead of falling back to a reported address. DeepBook was never affected.