Avatar
Rizful.com
97f848adcc4c6276685fe48426de5614887c8a51ada0468cec71fba938272911
Rizful.com: Free, easy-to-use homebase for Bitcoin on Lightning. ✉️ Free Lightning Address ⚡ Fast, reliable zaps & Lightning payments 🔌 Connect to hundreds of apps with NWC 🛡️ Enterprise-grade uptime & reliability Created by the team behind The Megalith Node, one of the biggest routing nodes on the Lightning Network.

Yes, we control the node. (BTW, many of the supposed "non-custodial" options, like Wallet Of Satotoshis "spark" wallet -- are in our opinion actually not "non-custodial" at all -- they're dependent on LightSpark not grabbing your funds...)

Great, looks like you've set up a Lightning Address with Rizful. You're 1/2 of the way there! Please follow the tutorial for your Nostr app here to learn how to connect your app to Rizful: https://docs.megalithic.me/category/using-rizfulcom

Once you've finished, please ping us back here so we can try to zap you!

interesting test case! your granular data is below.... interesting that it was #3 where we saw the zap receipt... this can sometimes happen due flakiness on whatever server you have producing your zap receipts -- or could possibly be whatever relays you are sending zap receipts to... or could be something else...

Individual Zap Attempts:

1. Attempted at: 2025-12-28 04:52:07 UTC

LNURL: 1710ms

Callback/Invoice Generate: 1040ms

Attempt ➡ Lightning Confirmation: 2602ms

Lightning Confirmation ➡ Zap Receipt: N/A

---

2. Attempted at: 2025-12-28 05:49:51 UTC

LNURL: 1605ms

Callback/Invoice Generate: 1071ms

Attempt ➡ Lightning Confirmation: 1058ms

Lightning Confirmation ➡ Zap Receipt: N/A

---

3. Attempted at: 2025-12-28 06:38:14 UTC

LNURL: 552ms

Callback/Invoice Generate: 921ms

Attempt ➡ Lightning Confirmation: 5153ms

Lightning Confirmation ➡ Zap Receipt: 4049ms

---

4. Attempted at: 2025-12-28 07:01:14 UTC

LNURL: 1794ms

Callback/Invoice Generate: 1083ms

Attempt ➡ Lightning Confirmation: 1038ms

Lightning Confirmation ➡ Zap Receipt: N/A

---

5. Attempted at: 2025-12-28 07:36:26 UTC

LNURL: 1929ms

Callback/Invoice Generate: 1100ms

Attempt ➡ Lightning Confirmation: 1171ms

Lightning Confirmation ➡ Zap Receipt: N/A

---

6. Attempted at: 2025-12-28 08:18:20 UTC

LNURL: 547ms

Callback/Invoice Generate: 1074ms

Attempt ➡ Lightning Confirmation: 1013ms

Lightning Confirmation ➡ Zap Receipt: N/A

---

So far, the number of Rizful users who have contacted us and said "I've lost access to my Rizful node or vault, can you help me get back in?".... is zero. ZERO.

Why? Because to make a Rizful account, you need to provide an email address, and confirm that email address.

If we start allowing nostr-only sign-in, without an email backup, this number will start going up fast, and we won't be able to help these users, because all we have is their nostr public key.

I just don't understand how you can offer something that can store real funds and NOT provide some way to "recover" access.... an email address is a very useful and well-established way to allow someone to reset their password....

Replying to Avatar calle

It depends what you are working on. If you are working on Bitcoin, I think you can't touch 95% of that stuff because of the risks involved. You have to know what every line of your code does.

But yes, for websites and apps, this is probably true. But not the parts that touch BTC or Lightning.

Do any Rizful users have suggestions for features to add to Rizful that would be useful, for our 2026 roadmap? Thanks!

just tried manually in jumble.social "invalid zap request" .. pls ask some others to try to zap you

Great, looks like you've set up a Lightning Address with Rizful. You're 1/2 of the way there! Please follow the tutorial for your Nostr app here to learn how to connect your app to Rizful: https://docs.megalithic.me/category/using-rizfulcom

Once you've finished, please ping us back here so we can try to zap you!

Great, looks like you've set up a Lightning Address with Rizful. You're 1/2 of the way there! Please follow the tutorial for your Nostr app here to learn how to connect your app to Rizful: https://docs.megalithic.me/category/using-rizfulcom

Once you've finished, please ping us back here so we can try to zap you!

nostr:npub1v60thnx0gz0wq3n6xdnq46y069l9x70xgmjp6lprdl6fv0eux6mqgjj4rp Hi, do you run the Lightning Node "⚡Lightning Goats CLN⚡" ? If so, when you get a chance you could you please drop us a line by Signal or Telegram, here: https://megalithic.me/contact .. thanks

Great, looks like you've set up a Lightning Address with Rizful. You're 1/2 of the way there! Please follow the tutorial for your Nostr app here to learn how to connect your app to Rizful: https://docs.megalithic.me/category/using-rizfulcom

Once you've finished, please ping us back here so we can try to zap you!

looks like you are set up correctly now!

Happy to help you troubleshoot if you can find a reproducible error.

90% sure that if the receiver switched to a nostr:npub1jluy3twvf338v6zlujzzdhjkzjy8ezj34ksydr8vw8a6jwp89ygshpp2kq address it would work. My memory is that this is some specific issue with the interaction between anmythest and primal.

. https://www.compactmag.com/article/the-lost-generation/ This is pretty interesting. I think ironically what he is describing is a world where white men are getting a huge advantage because they are being told immediately after college that they should not attempt to become academics or screenwriters or journalists. Everyone else isn’t told this and is going to suffer horribly if they make a decision to do one of these things.

Thanks. This looks to be specific to some kind of interaction between Amythest and Primal.. you can see it is failing at the "callback" stage of the zap, which is before Rizful gets involved... also, I just tried zapping @profk from Yakihonne and Jumble.social on the web, and it succeeded both times... this also points to some kind of Amythest/Primal Wallet issue.

Is this a Damus issue or a Rizful issue? If it’s Rizful, can u please try to zap from yakihonne and if there is a user who u consistently cannot zap, would you please provide the profile link to this user here? Thanks.

nostr:npub1mtuzjsdkc6c9ydac0am4dkdefcfszsr3cjx3kly5t4zasq626zhqpvvxl7 nostr:npub18m76awca3y37hkvuneavuw6pjj4525fw90necxmadrvjg0sdy6qsngq955 Oh, it's this issue: https://github.com/damus-io/damus/issues/3262

Seems like it's not fixed yet, it's only 2 months old so if you inquire with Damus they might fix it and include it in the next release.

I know it's this issue because it's indicated here:

Failed to decode NWC Wallet response JSON. Error: typeMismatch(damus.WalletConnect.Response.Result.ResultType, Swift.DecodingError.Context(codingPath: [], debugDescription: "result_type get_info is unknown", underlyingError: nil))

Today marks DAY FOUR of the "Rizful 300" awards initiative.

Each day, starting October 30th 2025, we are highlighting 10 Nostr OGs, and sending each a zap of 10,000 sats, for a total of 3,000,000 satoshis, over 30 days.

Today's "Rizful 300" award winners are: nostr:nprofile1qqsd9pqnwyshrse7z975h5ynptq9ktz3kv8txqs7lr20zgelqtys52cpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq32amnwvaz7tmsw4e8qmr9wfjkccte9e3k7mgpzemhxue69uhkymmnw3ezuumeda3x7m3wdejhgqguwaehxw309ahx7um5wgknqvfw09skk6tgdahxuefwvdhk6qgkwaehxw309aex2mrp0yhxummnw3ezucnpdejqzrthwden5te0dehhxtnvdakqz9thwden5te0v4jx2m3wdehhxarj9ekxzmnyqyg8wumn8ghj7mn0wd68ytnhd9hx2pysqjp, nostr:nprofile1qqs0yadtxlty76lqx7dgtnjhxcrqu9jtzd4q33l3u7x75ce6htvyhlsprpmhxue69uhhyetvv9ujuumwdae8gtnnda3kjctvqy2hwumn8ghj7etyv4hzumn0wd68ytnvv9hxgqg5waehxw309amk7apwva5hy6twduhx7un8qyt8wumn8ghj7un9d3shjtnswf5k6ctv9ehx2aqpr3mhxue69uhkymmnw3ezucnfw33k76tww3ux76m09e3k7mgpzpmhxue69uhkummnw3ezumrpdejqzxrhwden5te0wajkccm0d4jjumn0wd68ytnhd9hx2qgkwaehxw309aex2mrp0yhxummn9eek7cmfv9kqwds0lt, nostr:nprofile1qqsd5xd462g7qmksnwj5t0znveqgmjpt4ry7n7taxt4gafs0raktl2spr9mhxue69uhhyetvv9ujuumwdae8gtnnda3kjctv9uq3zamnwvaz7tmwdaehgu3wwa5kuef0qyt8wumn8ghj7cn0wd68ytnn09hkymmw9ehx2aqpz4mhxue69uhkummnw3ezummcw3ezuer9wchsz9nhwden5te0wfjkccte9ehx7um5wghxyctwvsq3wamnwvaz7tmjv4kxz7fwd3jhgumxduhxxmmd9uq3wamnwvaz7tmjv4kxz7fwdehhxarj9e3xzmny9uq3camnwvaz7tmwdaehgu3dxqcju7tpdd5ksmmwdejjucm0d56vqtu0, nostr:nprofile1qqsqdqc0dj6eyk7c9n99n0dgfrcq2enxmlcyd3fc9936n9azxndyp3gpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqgmwaehxw309aex2mrp0yhxummnw3ex7mt09eek7cmfv9kqzgrhwden5te0wfjkccte9ekx27rfdenhgmmwvf5hgcm0d9hzummjvuq32amnwvaz7tm9v3jkutnwdaehgu3wd3skueqpyfmhxue69uhkummnw3ez6an9wf5kv6t9vsh8wetvd3hhyer9wghxuet5qyw8wumn8ghj7mn0wd68yttkv4exje3wwdkx7arg0yh8w6twqyf8wumn8ghj7mmxve3ksctfdch8qatzqy2hwumn8ghj7un9d3shjtnwdaehgu3wwejhg8dp6wl, nostr:nprofile1qqsw2gmsywjupy570tsw2y5dgx5zzvfcgq8vzyxma8v29ync7g4hcycpr3mhxue69uhkymmnw3ezucnfw33k76tww3ux76m09e3k7mgpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqg0waehxw309ahx7um5wghx6mmdqy28wumn8ghj7un9d3shjtnyv9kh2uewd9hsz9nhwden5te0wfjkccte9ehx7uewwdhkx6tpdsq3vamnwvaz7tmzdaehgu3wwduk7cn0dchxuet5qyg8wumn8ghj7cn0wd68ytnndphhqqgmwaehxw309aex2mrp0yhxx6rpddsku7fwwduhxar9d4esa7l2vd, nostr:nprofile1qqsptpha27kgrdnpw7cqs7ascrayvheshxy4jjwgjd5rdmz7dngnzvspzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqg5waehxw309aex2mrp0yhxummnw3ezucn8qyt8wumn8ghj7un9d3shjtnwdaejuum0vd5kzmqpp3mhxue69uhkyunz9e5k7qg0waehxw309ahx7um5wghx6mmdqy2hwumn8ghj7ur4wfcxcetjv4kxz7fwvdhk6qgswaehxw309ahx7um5wgh8w6twv5q3vamnwvaz7tmjv4kxz7fwdehhxarj9e5kuen0wk6yzx, nostr:nprofile1qqspgz966pym4w9r3wtkqad0leqncdfph0h0vtxyec6422vlf9cl9jspzpmhxue69uhkymmnw3ezuumgdacqz8rhwden5te0dehhxarj95crztnev94kj6r0dehx2tnrdakszgnhwden5te0dehhxarj94mx2unfve5k2epwwajkcmr0wfjx2u3wdejhgqgdwaehxw309ahx7uewd3hkcqgkwaehxw309aex2mrp0yhxummnw3ezucnpdejqz9thwden5te0wfjkccte9ejxzmt4wvhxjme0qyt8wumn8ghj7un9d3shjtnswf5k6ctv9ehx2aqprpmhxue69uhhyetvv9uju6nddahhxefwwfhkx6mnnppg8j, nostr:nprofile1qqsfepkhw5m6vwqvudc78fyxp0r7r7e2mwegyxl34rcu6n5vuq3ypjgprdmhxue69uhhyetvv9ujucmgv94kzmne9eehjum5v4khxqg7waehxw309anx2etywvhxummnw3ezucnpdejz7ur0wp6kcctjqyw8wumn8ghj7mn0wd68yttsw43zuum9d45hxmmv9ejx2a30qydhwumn8ghj7mn0wd68ytn0wfskuem9wp5kcmpwv3jhvtcprfmhxue69uhhq7tjv9kkjepwve5kzar2v9nzucm0d5hszgmhwden5te0dehhxarj94mx2unfve5k2epwwajkcmr0wfjx2u3wdejhgtcprdmhxue69uhhyetvv9ujummjv9hxwetsd9kxctnyv4mz7qgkwaehxw309a3x7um5wgh8x7t0vfhkutnwv46qpf2k8z, nostr:nprofile1qqs07t6v67rwg26ryd6fey230mrm4u3dl5p4k7ssr04g8dhzhjav69gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsq35amnwvaz7tmjv4kxz7fwd45ku6tzdak8gtnfdenx7tcpr3mhxue69uhkummnw3ez6vp39eukz6mfdphkumn99e3k7mgpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqgewaehxw309aex2mrp0yh8wetvd3hhyer9wghxuet5qyt8wumn8ghj7cn0wd68ytnn09hkymmw9ehx2aqpydmhxue69uhkummnw3ez6an9wf5kv6t9vsh8wetvd3hhyer9wghxuet59u797rpa, and nostr:nprofile1qqsr88dk9jgu3nag7zzl38c3tuddjh03pnn5jucz8xmq2nfy2vejjzqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3uamnwvaz7tmzdaehgu3wd35kw6r5de5kuemnwphhyefwvdhk6qguwaehxw309a3x7um5wghxy6t5vdhkjmn50phkkmewvdhk6qgmwaehxw309aex2mrp0yhxx6rpddsku7fwwduhxar9d4esz9rhwden5te0wfjkccte9ehx7um5wghxyecpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qzxnhwden5te0wfjkccte9ehx7um5wfcxcetzwvhxxmmdqythwumn8ghj7enfd36x2u3wdehhxarj9emkjmn9yt99qj

Thank you all for your service to Nostr!

Around minute 40 there is a great discussion of “auditability vs privacy” tradeoffs: https://fountain.fm/episode/1FaKA0B4a6wSn7fITcOn

...... something I hadn't fully conceptualized, but when it's explained like this, makes a lot of sense. Basically the L1 can't be fully private if you want anyone with limited storage and compute power to be able to audit it.

Privacy is a good job for L2, which is yet another great reason we should resist bad actors trying to centralize L2s like Lightning.

Today marks DAY TWENTY of Rizful’s “30 Days, 30 Devs” initiative.

From September 21st through October 20th, 2025, we are highlighting one Nostr developer each day, and sending a zap of 100,000 sats to that developer.

Today we are zapping nostr:npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk , developer of the https://iris.to/ client

Thanks nostr:npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk Your 100k zap is sent!

--

Please help us with the “30 Days, 30 Devs” initiative... simply reply to this note with the pubkeys of any devs you would like to see zapped. Don't be shy, we've got 30 days!

Replying to Avatar Renaud Lifchitz

In a nutshell, from the victim LN address, we can easily find its Spark on-chain address throught LNURL "well-known" URL, for example:

https://walletofsatoshi.com/.well-known/lnurlp/warmestfuture710

From here, we can browse all the address details on a blockchain explorer like:

https://www.sparkscan.io/address/spark1pgss9gqjlk5emnuwg9dvxdh76r70ny2nmumhnzlth6q4zr0hych72gerqux6vp?network=mainnet

Conclusion: Everything is public... 🤬

cc nostr:nprofile1qyvhwue69uhkyat8d4skutndva6hjtnwv46r5dpcxsuqz9nhwden5te0vfjhgcfwdehhxarjd9kzucmpd5qzqxvfqd89dw8kqmrjfaz6zt8gfggcg93p4tm3s2slv4jrszuugfmt74rjkj nostr:nprofile1qythwumn8ghj7ct5d3shxtnwdaehgu3wd3skuep0qyt8wumn8ghj7etyv4hzumn0wd68ytnvv9hxgtcqyqxzfcer2g508mjnd8223frw4yhj3udg8ymducdvddqq84qrgn2zyd6ur5w

Not only public -- but Lightspark has the IP address and user-agent of this user, which they can granularly associate with each transaction. Crazy.

oh, trying this now, I think actually the button overflow is only happening because of the emulator.... I saw it also in the emulator when I switched to Pixel 7, but then if I refresh the page it seems to be ok

Always fun to spend the period between 2 AM and 4 AM PST debugging Lightning issues.

Great, looks like you've set up a Lightning Address with Rizful. You're 1/2 of the way there! Please follow the tutorial for your Nostr app here to learn how to connect your app to Rizful: https://docs.megalithic.me/category/using-rizfulcom

Once you've finished, please ping us back here so we can try to zap you!

Looking at the spec and our implementation.

Starting from here --

https://github.com/nostr-protocol/nips/blob/master/47.md#nostr-wallet-connect-uri

"The wallet service generates this connection URI with protocol nostr+walletconnect:// and base path its 32-byte hex-encoded pubkey, which SHOULD be unique per client connection."

So our understanding is that for each NWC connection (a user or wallet can have multiple of these), we generate a new, arbitrary nostr npub/sec pair for the NWC connection.

This pubkey doesn't match any other pubkey -- either of the user or as the service "as a whole".

Therefore, the pubkey you get from the "get_info" response is not really useful information and can be ignored.

It would be great if nostr:npub1zk6u7mxlflguqteghn8q7xtu47hyerruv6379c36l8lxzzr4x90q0gl6ef or nostr:npub19hg5pj5qmd3teumh6ld7drfz49d65sw3n3d5jud8sgz27avkq5dqm7yv9p nostr:npub1wl3cs46hek62jm4j3x3k5etut3dkghlqfq6satsxa8q5s3tngcps22kjnr can look at my explanation above, and tell me if I am wrong.

Replying to Avatar fiatjaf

That was the idea for https://web.nostr.technology/.

But there isn't a component that renders a list of notes yet, only individual notes and profiles.

This is what I got to by clicking the Source link on the upper right of https://web.nostr.technology/components/nostr-name

The other issue is this -- I am technically savvy, and when I FIRST joined Nostr, I mistakenly set up multiple separate private keys on different apps, and got fully confused, and then had to start over again.

If I had started my journey by ALSO locking my satoshis to the first private key I ever generated... I would have been very sad.

Sure, I will agree, for technically savvy users -- developers, etc., that a private key might be a better approach.

The issue is Normies -- people who have never touched a private key, and don't really even have "a place to put it".

The issue isn't just "security" -- the real issue is "I have this account with sats somewhere and I can't remember what the website is called or how I get back to it or what my password is." This is EXTREMELY common. Everyone knows the solution to this is to search their email for the right keyword and BAM -- there is the confirmation email from the service. Then you go to the service, do a "password reset" -- and you are back in.

If the user has not enabled 2FA, then you are completely right, a user can be hacked by someone gaining control of their email.

But I submit to you that this is not the usual problem. The usual problem is "how do i get back to the website where my sats are stored, I can't even remember the name of it."

I expect that 75% of Nostr developers and Linux users will vehemently disagree with me on this issue.

Planets are known scam and an obvious front for the real activity we know is going on in our solar system. Please be cautious with ANYONE who tries to get you involved in any planet-related activity.

nostr:npub1r0rs5q2gk0e3dk3nlc7gnu378ec6cnlenqp8a3cjhyzu6f8k5sgs4sq9ac The more you talk smack about nostr:npub1jluy3twvf338v6zlujzzdhjkzjy8ezj34ksydr8vw8a6jwp89ygshpp2kq , the more BTC goes up. Thank you for your service.