diff --git a/package.json b/package.json
index 31ca941..921129c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@mirageprivacy/sdk",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "SDK for private transfers on Mirage",
   "type": "module",
   "main": "./dist/index.cjs",
diff --git a/src/internal/attestation.ts b/src/internal/attestation.ts
index ae7cd8e..fc9c927 100644
--- a/src/internal/attestation.ts
+++ b/src/internal/attestation.ts
@@ -189,7 +189,11 @@ export async function verifyAttestation(
     );
   }
 
-  const { QuoteVerifier } = await import("@phala/dcap-qvl");
+  const dcap = await import("@phala/dcap-qvl");
+  // Package is CJS with a trailing module.exports, so some bundlers only surface it as default.
+  const { QuoteVerifier } = dcap.QuoteVerifier
+    ? dcap
+    : ((dcap as unknown as { default: typeof dcap }).default ?? dcap);
 
   const quoteBytes = hexToBytes(attestation.quote);