Ultimafia: what we found
Crypto payments: Solana invoices paid with version 1 transactions are never matched.
Public since 2026-10-28. GitHub issue UltiMafia/Ultimafia/issues/3123 was posted.
Code: UltiMafia/Ultimafia, their default branch on 2026-10-28. Reported to them: UltiMafia/Ultimafia/issues/3123.
Status: Open: no fix merged yet
Findings
breaks money
Crypto payments: Solana invoices paid with version 1 transactions are never matched
modules/cryptoPayments.js (line 489) scans the watch address and reads each transaction with getTransaction(signature, { encoding: 'jsonParsed', maxSupportedTransactionVersion: 0 }). When the buyer's payment is a version 1 transaction the RPC answers error -32015 instead of the transaction, so solanaIncomingRaw never sees it and the invoice stays unpaid.
Version 1 transactions are a large share of mainnet now (about 40% of non-vote transactions in a block I sampled), so this depends only on which wallet or SDK the payer uses.
modules/cryptoPayments.js:489
getTransaction(<v1 signature>, { maxSupportedTransactionVersion: 0 }) -> error -32015 "Transaction version (1) is not supported by the requesting client"
getTransaction(<v1 signature>, { maxSupportedTransactionVersion: 1 }) -> the transaction (version 1, meta present)Fix: maxSupportedTransactionVersion: 1 (the jsonParsed shape is the same).
What we measured
| What | Result | How | Checked |
|---|---|---|---|
| Reported to them | UltiMafia/Ultimafia/issues/3123, posted 2026-10-28 | https://github.com/UltiMafia/Ultimafia/issues/3123 | Oct 28, 2026, 3:04 PM UTC |
| Status | Open: no fix merged yet | GitHub issue UltiMafia/Ultimafia#3123 | Oct 31, 2026, 1:55 AM UTC |
Tools run on this project
Check it yourself
Every Pulse tool, live on mainnet, starting with tx_version. Paste any signature from this report, or your own.
Toolbox
Pick any tool, change any input, run it on mainnet, and reopen any call to change it and run it again.
Ctrl ↵ runs the tool
Run when code can't find or read a transaction that is on chain, or before relying on code that reads other people's transactions. Read the docs
Response
Run the request to see the live response. The inputs are real mainnet data, so it works as it is.
Your calls 0
Calls you run appear here and stay in this browser. Open one to change its inputs and run it again.