Confirmation screen — Any withdrawal or send above a configurable threshold (default $10,000) now opens a GUI asking the player to confirm or cancel before executing, preventing accidental large transfers
Thread-safety fix — Fixed a rare silent bug where debt collector tracking could corrupt when the loan system and main thread accessed the same data simultaneously under server load
Token security — Session tokens for the web interface are no longer exposed in request URLs, improving security for servers with web logging enabled
Internal cleanup — Various structural improvements to keep the plugin maintainable and fast
New Config
Code (Text):
# Confirmation screen threshold — set to 0 to disable
confirm-threshold: 10000
Your existing config.yml, messages.yml and player data are fully compatible — no migration needed. Add confirm-threshold manually to your existing config.yml or it will default to 10000 on a fresh install.