calle 👁️⚡👁️ on Nostr: A dev reported a vulnerability via email and the bounty payment to them was made in ...

A dev reported a vulnerability via email and the bounty payment to them was made in ecash via email as well.

Nice.

Thank you Nodesignal Podcast (npub1n0d…02cy) 👏

quoting
nevent1q…z6ef

The first bounty has been claimed by tragic (npub1u07…ez97). He responsibly disclosed and fixed a vulnerability in the Nutshell's multinut payment feature that could have lead to loss of funds if abused by an attacker. Nutshell mint runners are unaffected if they're running a release version since the vulnerability was caught before making it into any new release.

Of course the bounty of 100k sats was paid out as Cashu tokens (and sent as a simple string via email.

Thank you tragic (npub1u07…ez97) for contributing to cashu🧡
note162d…texm