Is the fund-sweeping bug fixed for this extension?

Been able to easily sweep a nodes funds if you have this extension enabled

Reply to this note

Please Login to reply.

Discussion

Thanks, Semi warned me about it awhile back and I blacklisted the extension. I was hoping nostr:npub1c878wu04lfqcl5avfy3p5x83ndpvedaxv0dg7pxthakq3jqdyzcs2n8avm would address the issue as there are probably plenty of folks out there who have it enabled and are at risk if it hasn't been patched.

It was patched in January, when the bug was disclosed.

Thank you!

The vulnerability was patched and a new release created many months ago.

That's how software works, particularly money software.