I've found a bug with cashu.space and maybe cashu / eCash in general. This exploit is between two specific mints and it's possible to empty one of them. If someone was talented in when scripting this could be done.

I've asked two of my peers to review my findings. If anyone has a direct link to cashu developers or cashu.space I would like to share my findings. The mint in question I don't want to disclose and there is an odd way to make this happen and it is not easy but it is possible and I've documented my findings.

#Cashu

Reply to this note

Please Login to reply.

Discussion

It looks like this was fixed. The mint in question no longer works. Hopefully it was shut down by someone discovering this ahead of my announcement or someone understood and shut it down afterward.

ECash Cashu...

I would not recommend for new people. There are a lot of things that are recommended and I'm afraid that others like myself will lose sats and become disillusioned.

Try to get people who do use these new tools to understand that if dns change or some other external factor happens they will lose funds. If they get up to 50,000 sats they need to make them into on chain utxo. Maybe 50%.

So far I've had so many problems with lightning, Cashu, eCash because I'm stupid. That needs to be factored in as well.

Like if you give me a crane and a concrete bucket that has 2 cubic yards I can move it and help guys pour it smoothly. But if I give you the same set up. You will turn the crane over and kill yourself and someone else.

A lot of what I do in meat space has consequences of life or death. I still experience the same stress with technology but I can't be cavalier because how I earned my money was with blood, sweat and tears.

nostr:nevent1qqspxazxpuuaa904pff2m66wycaxkhldqpqqysw0djj6jmzhacjt37gpr9mhxue69uhhqun9d45h2mfwwpexjmtpdshxuet59upzqfsad2hgm4shf7qywhz9t4r03v7qfkfc36qv0lsekyguh97rvwj3qvzqqqqqqy0kx4sy