IOTA makes accounts more programmable
Mainnet v1.25.0 introduces protocol version 28, with Move authentication and early tooling for cleaner sponsored transaction flows.
IOTA published the mainnet v1.25.0 release of its node software on June 17, introducing protocol version 28. The most concrete change concerns account authentication in Move, the smart contract language used by the network: contracts can now inspect which authenticator function was used by both the transaction sender and the sponsor. In practical terms, an application can understand more about how a transaction was authorized, instead of only checking that it was signed.
That sounds narrow, but it matters for blockchains that want to support more than a simple personal wallet model. IOTA is also enabling Move-based account authentication on mainnet and Move-based sponsor account authentication on testnet. Sponsorship means that some transaction costs can be paid by a third party, such as an application, company, or infrastructure provider, rather than by the end user. It is a useful building block for flows where developers want to hide network fee complexity while keeping authorization rules visible and enforceable in code.
The release also adds operational safeguards for validators and full nodes. Denial-of-service protection is enabled in dry-run mode by default for validators, allowing operators to observe and measure potential blocking behavior before applying every sanction directly. A new admin API endpoint also lets operators hot-reconfigure traffic control policy without clearing blocklists. For a public network, this kind of tooling is not secondary to developer-facing features: it lowers operating friction and gives node operators more room to react during incidents.
The point is not that IOTA has suddenly changed scale overnight. The release shows a more specific direction: blockchain accounts are becoming more programmable, with authorization, fee payment, and node defense exposed as parameters that developers can design around. If these features stabilize, they could make sponsored usage cleaner for industrial or consumer services that do not want every user to understand gas, signatures, and network roles before completing an action.