Yes, we realized during implementation of NWC for nostr:npub1jluy3twvf338v6zlujzzdhjkzjy8ezj34ksydr8vw8a6jwp89ygshpp2kq that there are some tricky race conditions with payments and budgets considering that a Lightning payment can be "in-flight" for quite a long time... there is a potential attack on a NWC user where an attacker could exceed the user's budget if the attacker submits a lot of payment requests all at once and the user's NWC wallet service isn't properly tracking payments 'in-flight'!

Reply to this note

Please Login to reply.

Discussion

A few days ago, my team needed a Lightning node. One of our developers suggested your site, so I signed up, and I have to say, setting up and managing a node was way easier than I expected. The built-in inbound features are especially useful, I really like them.

Looking forward to seeing what you guys do next. Good luck!