🚨 Please update to Zapstore 1.1.2
It was released last week and contains a fix for a major security bug found in an underlying library, related to nostr event verification.
I don't believe it has been exploited as apps are loaded primarily from relay.zapstore.dev (which properly verifies nostr events) and we haven't heard of any report.
Found by ethicnology, thank you Sir (couldn't find his nostr profile, he deserves some zaps!)
https://github.com/zapstore/zapstore
Zapstore
npub10r…jt2p8
2026-09-04 17:39:37 GMT
Author Public Key
npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8Published at
2026-09-04 17:39:37 GMTEvent JSON
{
"id": "949c086e95c949c3e0853b809540aeaa7a47e3957d93f3583eb98c8beb22267c",
"pubkey": "78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d",
"created_at": 1788543577,
"kind": 1,
"tags": [
[
"r",
"https://github.com/zapstore/zapstore"
],
[
"client",
"Amethyst"
]
],
"content": "🚨 Please update to Zapstore 1.1.2\n\nIt was released last week and contains a fix for a major security bug found in an underlying library, related to nostr event verification.\n\nI don't believe it has been exploited as apps are loaded primarily from relay.zapstore.dev (which properly verifies nostr events) and we haven't heard of any report.\n\nFound by ethicnology, thank you Sir (couldn't find his nostr profile, he deserves some zaps!)\n\nhttps://github.com/zapstore/zapstore",
"sig": "ac2bc787304e3804d3e898eb541fbe63bdfa198c16132120cbbce2d1aa25d943b6494895d641d51c95233ff4d731cd1a39fd047276d592feaa5cb4ef7998f15b"
}