diff --git a/hubzilla/addon/g1wallet/g1wallet.php b/hubzilla/addon/g1wallet/g1wallet.php
index 254b6ff..f8f6485 100644
--- a/hubzilla/addon/g1wallet/g1wallet.php
+++ b/hubzilla/addon/g1wallet/g1wallet.php
@@ -107,13 +107,11 @@ function g1wallet_content() {
         head_add_css('/addon/g1wallet/view/css/g1wallet.css');
     }
     if (function_exists('head_add_js')) {
-        // bip39 must load before g1wallet.js (g1wallet.js calls window.bip39).
+        // Load order: tweetnacl → bip39 → g1wallet.js
+        head_add_js('/addon/g1wallet/vendor/tweetnacl-1.0.3.min.js');
         head_add_js('/addon/g1wallet/vendor/bip39-3.1.0.min.js');
         head_add_js('/addon/g1wallet/view/js/g1wallet.js');
-        // Note: vendor/scrypt-js-3.0.1.min.js is NOT loaded.
-        // scrypt is the obsolete Cesium1 / Duniter v1 derivation algorithm.
-        // Duniter v2 / Ğecko uses entropy-as-seed (no KDF). The file is
-        // retained in vendor/ for reference but is not wired anywhere.
+        // Note: vendor/scrypt-js-3.0.1.min.js is NOT loaded (obsolete Cesium1 algorithm).
     }
 
     $access    = g1wallet_access_state();