What is Nostr?
calle 👁️⚡👁️
npub12rv…85vg
2025-01-05 19:30:09

calle 👁️⚡👁️ on Nostr: I want to thank lontivero from the Wasabi team for responsibly disclosing this ...

I want to thank lontivero (nprofile…t3rp) from the Wasabi team for responsibly disclosing this vulnerability in Cashu's cryptography around one year ago.

I also thank phyro (nprofile…ycww) , waxwing (nprofile…eruw) , Ruben Somson, and the Cashu devs, who were instrumental for finding a fix in a very short time. It was a couple of chaotic and exciting days (can live without it though!).

Here is a more in-depth analysis of the issue and how we ended up fixing it.

https://gist.github.com/callebtc/0bb0c1ce8ed030dd7c9330b70aec3b6d

Exactly a year ago, I discovered a vulnerability in Cashu: https://gist.github.com/lontivero/91b98dbb44b45140b9b7090229f2b8ca
It was fixed immediatelly in this commit: https://github.com/cashubtc/nutshell/commit/6db4604f998bc5499594cbc55f6c7c2dd9708710 and further improved in subsequent commits.
Author Public Key
npub12rv5lskctqxxs2c8rf2zlzc7xx3qpvzs3w4etgemauy9thegr43sf485vg