Changelog

2026-10

• New documentation site in Simplified Chinese, Traditional Chinese and English. Corrected the descriptions of callback retries, callback fields, error codes and response format to match the platform's actual behaviour.
• New sample code for Node.js, Python, PHP, Java and C#, covering all endpoints, callback verification and self-tests, with SHA256 checksums.
• Security hardening (no effect on normal use):
  • Pay-in order creation (createBuyOrder, createBuyOrder2) always uses the outer merchant number of the request, never the one inside the encrypted data;
  • Cancel order (cancel2) only cancels your own orders;
  • Mark as paid (complete2) requires a cardId assigned to that order, otherwise it returns the new error code 40023.
• New pages: List payout methods, multi-currency payout parameters, and the security checklist.