See new patch releases here: https://generalbytes.com/patch

Look for solutions in our knowledgebase here: https://generalbytes.com/kb

Our cloud service is currently undergoing upgrade. We expect the service to resume operation in 30 minutes. Upgrade takes longer than usual due to database migration.

Upgrade is finished. GB cloud services are resumed.

Version 20220429:
New Features:
Terminal/Server: Removed support for RUB currency.
Terminal: Added support for BATM2Ultra model.
Terminal: Added support for BNR recycler.
BATMTwoUltra: Faster BNR banknote dispensing speed.
Terminal: Added ability to scan cash bag's code on cash collection screen.
Server: Added Limit Calculator on Identity in CAS. Limit Calculator allows operator to tell customer when he is able to
insert desired amount into machine based on identity limits and transaction history.
Server: Added support for Travel Rule (CipherTrace Traveler).
Improvements:
Server: Customer tracking id(phone number) added into events for analytics purpose.
Server: Position of button Test dispense to reject cassette moved on CAS page.
Server: Cash collection in admin contains also location's public id.
Server: Hot wallet coin.cz is now marked as Not For Production Use.
Server: Cash collection notification now contains all cash collection data.
Server: SSN values are now encrypted in database.
Server: Added ability to test cash dispenser remotely via admin by moving banknote from cassette to reject box.
Server: GDPR audit log now contains also entity value changes and its authors.
Server: Added ability to search for location in admin by location id.
Server: Added parameters to CipherTrace provider to option set different thresholds.
Server: Crash logs moved to new location on server /batm/app/master/crashlogs/sentry/BTXXXXXX
Server: Identity CSV export performance improved.
Server: “Automatically Unregister Identities With Expired Document ID” runs 2h after server start and every midnight
and newly doesn't unregister identity when there is at least one unexpired document available.
Server: JSON webhook data are now part of the logged line.
Terminal/Server: Added cash dispensing error notification.
Terminal/Server: Added warning in CAS when cash dispensing cassette is removed.
Terminal: Decreased logging on terminal.
Terminal: Improved camera QR code scanning performance by fixed focus.
Terminal: Added more detailed error messages for BNR recycler.
Terminal: Faster BNR dispensing.
Terminal: Cash collection screen on terminal now contains also location public id.
Terminal: Chinese language translations updated.
Terminal: Lowered number of cash pickups when dispensing cash.
Terminal: Buttons in terminal administration and other dialogs are now bigger.
Terminal: Check wallet balance screen now contains also camera preview.
Terminal: Device connected also contains wifi signal strength.
POS: Added support for ZPUB.
Bug Fixes:
Server: Formatting dates in CSV exports got corrupted when multiple exports were executed at once.
Server: Banknote history CSV export took too much memory.
Server: Admin service was logging wrong ip address when behind proxy.
Server: "Not Always Required" setting removed from SSN KYC/AML settings instruction.
Server: Fixed forwarding transaction size and mining fee calculation for BTC and LTC.
Server: Use existing database user when restoring database.
Terminal: Fixed privacy screen skipping in redeem ticket screen flow.
Terminal: Fixed rare UI bugs collected by telemetry.
Terminal: Exchange rate was incorrectly written on the redeem ticket when fixed fee was non-zero.
Terminal: Fixed camera focus at scan redeem ticket screen

2-Way ATMs (cash to crypto & crypto to cash) are quickly becoming the standard in the Bitcoin ATM industry, find out why. ⛳️

Version 20220531:
New Features:
Server/Terminal: Added memo/tag support for BNB currency.
Server: Added support for FTX.com exchange.
Improvements:
BATMTwoUltra: Added SCR recycler support for BATMTwoUltra.
BATMTwoUltra: Faster BNR banknote acceptance speed.
BATMTwoUltra: Allow entering cashbox settings by opening BNR lock without need of removing cashbox.
Terminal: Faster camera initialization in BUY mode.
Server: Optimized ping performance - server performs less queries into database on terminal ping.
Server/Terminal: Terminal chart is now updated only once a day.
Server: More information is written into GDPR audit log.
Server: Notifications refactored inside of master service.
Server: Location's opening hours implementation was refactored.
Bug Fixes:
Terminal: Minor BNR recycler fixes.
Terminal: Please wait screens look was harmonized across multiple screens.
Terminal: Application crashes that happened in native code were not reported to server.
Server: Only last queued transaction was marked as failed when output queue flush failed.
Server: It was impossible to set terminal profit override when terminal template was used.
Server: ID scan photos of unregistered identities were not saved after their first transaction.

Version 20220725:
New Features:
Terminal: Added ability to turn on bitcoin donations for Ukraine on machine. See KB article how to do that.
Terminal/Server: Added possibility to withdraw cash by OTP sent via text message without use of redeem ticket
Server: Added ability to handle terminal notifications in Java in server extensions. See INotificationListener.java
BATMTwoUltra: Added support for BNR connection via USB.
BATMTwoUltra: Added support for selfie camera.
Improvements:
Terminal: Added support for Metamask ETH address QR code format.
Terminal: Improved cash acceptance speed by BNR.
Terminal: Updated French language translations.
Terminal: Improved animation performance of price chart in screen saver when switching between crypto currency pairs.
Terminal: Improved dispense to reject box dispense test when some of the cassettes are empty.
Server: Reverse proxy installation checks for FQDN.
Server: Added database indexes to transaction record for faster filtering by fiat and crypto currency.
Server: Improved textual explanation of phoneline type check in server admin.
Server: Improved textual explanation of terminal publish settings.
Bug Fixes:
BATMTwoUltra: Number of BNR fixes.
Terminal: Terminal didn't download new configuration automatically from server when server ip was changed.
Terminal: Face capture photo capture and camera preparation for QR code scanning could overlap.
Server: Fixed ETH purchase in BitGo
Server: Fixed BitGo null fields being sent with create address request.

IMPORTANT: We are sorry to inform you that 30minutes ago security issue has been identified in our CAS admin service which allows attacker to create a CAS user with administrative rights and therefore modify terminal cryptosettings for example by setting invalid payment address cryptosetting or setting his own sell wallet. We recommend you to:
0. Immediately limit access to your CAS admin (TCP port 7777 or 443) on firewall only for your IP addresses (for example home or office).
1. Review list of the CAS users on your server and make sure no new user is on your CAS server and check their permissions.
2. Review your cryptocurrency crypto-settings by executing cryptosetting tests.
3. Contact GB support if you need any assistance. Make sure you mention your server version.
4. If you don't know how to change your firewall settings shutdown your admin and master service until the patch is provided.

We will inform you once we have more information.

Releases containing security fix are being pushed to our distribution servers. We expect them to become available in next 30 minutes. Stay tuned we will post more information in next 30 minutes.

Information about the incident including the solution is here:
https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/2785509377/Security+Incident+August+18th+2022

As a part of ongoing investigation we would like to ask you to fill the following form: https://forms.gle/JSDpQweHY4uAQdN5A

We recommend ATM operators that don't hide their ATM server and terminals behind VPN completely yet to do so. It will make their network more secure for the future. It becomes appearent that having critical infrastructure accessible on public internet is not the future proof concept.

Dear customers, today we received a report from a BATM operator that lost coins from his BUY wallet. Based on the logs provided we believe that this Operator upgraded his server to the patched version - but forgot to delete the unpaired Terminal that the attacker created while he had access to the server. Please (again) review all users that are listed in your CAS - and revoke access to the ones that you are unsure of including user 'gb'. Also DELETE ALL unpaired terminals - so the attacker cannot connect his own terminal to your server. Also delete all terminals on your server that might be paired but are not yours.

Dear customers,
Please be careful when you are unpairing terminals.

When you unpair terminal you are allowing any terminal with particular serial number to connect to your server and access hot wallet. Server trusts only to terminal that first pairs with the server after unpairing.

Unpair only terminals when you have information from physical location that machine is unable to connect to server.

Attackers are trying to emulate terminals with serial number of their choice and try to trick you into unpairing existing terminals.

To further protect yourself please move your terminal network behind VPN.

Version 20220815:
New Features:
Server: Added support for Premium tier - a tier above Registered tier.
Server/Terminal: Added possibility to allow CAS users entering different parts of terminal administration.
Every user generates his own QR code for entering terminal administration.
Terminal: Added Montenegro flag in terminal UI.
Improvements:
Server: First half of admin UI is rewritten to ReactJS.
Server: Added ability to create restore points via batm-manage.
Server: Added ability to assign identity to sell and withdraw transactions.
Server: EveryTrade renamed to WhaleBooks.
Server: Don't report Binance rate source misconfiguration as an exception.
Server: Added ability to allow only withdrawals by same identity as sell was created.
Terminal: Printer disconnected should be a warning.
Terminal: Added ability to cancel diagnostic test.
Terminal: Faster camera preview on some screens.
Terminal: Terminal reboot action is performed only when terminal gets to a home screen or screensaver.
Bug Fixes:
Server: Various Veriff fixes.

Version 20220930:
New Features:
Server/Terminal: Added experimental support for credit card payments using card reader for buy direction.
Server: Added support for secondary output queue. What queue transaction should be enqueued to is determined by extension only.
Improvements:
Server: Further rewrite of Admin UI to ReactJS.
Server: Resend of failed batch transaction is now able to resend all transactions that were in the batch.
Server: Overages in sell transactions now don't cause transaction to fail when new option Allow Overage is enabled.
Server: Added ability to enqueue also transactions for wallets that do not support sendMany.
Server: Added ability to import blacklisted addresses in admin via CSV.
Server: Added database index to GDPR audit log table.
Server: Added ability to mark transaction as withdrawn via server extensions.
Server: Chainalysis scoring provider now performs scoring of ERC20 tokens also on ETH main network.
Server: Identity images are now exported in zip.
Server: Added ability to set allowed period for transaction buy resending in the organization.
Server: Added new notifications for verification process.
Server: Added 3 attempts when connection to SMTP server fails when sending email.
Server: Removed DAI, BCH support from CoinMate.io exchange.
Server: Added ADA support to CoinMate.io and Kraken exchange.
Server: Added ability to read server configuration properties from extension.
Server/Terminal: Added custom transaction failed template for buy printed receipt.
Terminal/Server: Added possibility to set separate help videos for Buy and Sell flows.
Terminal: Added Privacy Policy & Custom Privacy Notice to standard terminal UI.
Terminal: Increased size of QR code image for Bitcoin Lightning on screen.

Version 20221001:
New Featrues:
Server/Terminal: Added support for GMKit.