Replay attacks are important to consider with Nostr Wallet Connect implementations.
The NWC request events are ephemeral, however they can come back at anytime. Keeping track of what NWC request event IDs have been run (and seen) is especially important for payment commands to stop both accidental or malicious attempts at duplicate payments.
Braydon Fuller
npub1r0u…zzyc
2024-05-19 19:21:06
Author Public Key
npub1r0ulywwu593kzjdu9uluxdq80t54n65kql9vl9z7lrutkgnachssk7zzycPublished at
2024-05-19 19:21:06Event JSON
{
"id": "439c62cab27721089db22d756a7dff5e48ae7eaa5e19e90e3eac0bbd183e50a9",
"pubkey": "1bf9f239dca1636149bc2f3fc334077ae959ea9607cacf945ef8f8bb227dc5e1",
"created_at": 1716139266,
"kind": 1,
"tags": [],
"content": "Replay attacks are important to consider with Nostr Wallet Connect implementations.\n \nThe NWC request events are ephemeral, however they can come back at anytime. Keeping track of what NWC request event IDs have been run (and seen) is especially important for payment commands to stop both accidental or malicious attempts at duplicate payments.",
"sig": "1a9cd46517fb843854d41ba27c9db7985a7ff4a69592b5ab6da249d13b38ebc17e974820ac85f5b57bc9fa33448e52dfbd0a0506e2bfbda1b31b9a13eb93d636"
}