Danger! Don't use wallets like nostr:npub1hcwcj72tlyk7thtyc8nq763vwrq5p2avnyeyrrlwxrzuvdl7j3usj4h9rq and nostr:npub1cm3rpgj7457yjuqnvdalxaauakqu0ndkpkyp5cldkyutpz4xszpsmk96wt that allow LightSpark to spy on your transactions! See full details: https://github.com/buildonspark/spark/issues/64
heads up that if you use the new WoS anyone can lookup your balance and transaction history. all they need is one of your bolt11 invoices. nostr:npub1u8lnhlw5usp3t9vmpz60ejpyt649z33hu82wc2hpv6m5xdqmuxhs46turz made a tool that you can use to extract a spark address from an invoice. i just tested it with one of my invoices and the tool gave me a sparkscan link that displays my current balance and transaction history 😳.
https://github.com/benthecarman/spark-invoice-doxxer
i prefer their custodial wallet over this.
Discussion
No replies yet.