New Security section in apps allows you to enable or disable the transfer method and restrict API access only to the allowlisted IP addresses.
Now the transfer method is disabled by default for all new apps.
For created apps, we recommend to add your IP addresses to allowlist or disable the
transfer method if you do not use it in your service.This will protect access to your apps balance in case your API token was leaked or used by third parties.