Interesting. This is just with that WoS spark wallet though, right? Not the old central custody WoS ones?
This is a serious privacy concern and my opinion is that nobody should use the new WoS Spark wallet without being fully aware of the risks. ⚠
I crash-tested this myself, comparing a nostr:npub1jugar2agq6369p0l86razavs9shj2p6pscxecevs8j94ap37hkqsjlfc28 SDK Spark wallet with nostr:npub1hcwcj72tlyk7thtyc8nq763vwrq5p2avnyeyrrlwxrzuvdl7j3usj4h9rq and here’s what I found. 🪖💥
The first screenshot is an invoice from Breez, the second is from WoS. You can clearly see that the Spark address is only exposed in one of these. 👇
