Cake Wallet bug found🐞

npub1yu25lwrnht0knsl2swsd5mn966s4p54l3aejplpnzsjg6aryt3jq9t9xxs

hex

e31d7bea5fa66d451b07481905f0f656f120af0d26fcdec99132342c90131183

nevent

nevent1qqswx8tmaf06vm29rvr5sxg97rm9dufq4uxjdlx7exgnydpvjqf3rqcprpmhxue69uhhyetvv9ujuem4d36kwatvw5hx6mm9qgszw920hpem4hmfc04g8gx6dejadg2s62lc7ueqlse3gfydw3j9ceqsmn5pm

Kind-1 (TextNote)

2026-07-19T06:07:09Z

Cake Wallet bug found🐞 Team is informed, said SoRrY and is working on a fix 🫠

‚Severity: High (privacy). Scanning a bitcoin: URI with a message permanently embeds the message (third-party-controlled text) onchain without user awareness when signing.‘

https://github.com/cake-tech/cake_wallet/issues/3418

原始 JSON

{
  "kind": 1,
  "id": "e31d7bea5fa66d451b07481905f0f656f120af0d26fcdec99132342c90131183",
  "pubkey": "27154fb873badf69c3ea83a0da6e65d6a150d2bf8f7320fc3314248d74645c64",
  "created_at": 1784441229,
  "tags": [
    [
      "r",
      "https://github.com/cake-tech/cake_wallet/issues/3418"
    ],
    [
      "client",
      "Damus"
    ]
  ],
  "content": "Cake Wallet bug found🐞 \nTeam is informed, said SoRrY and is working on a fix 🫠\n\n‚Severity: High (privacy). Scanning a bitcoin: URI with a message permanently embeds the message (third-party-controlled text) onchain without user awareness when signing.‘\n\nhttps://github.com/cake-tech/cake_wallet/issues/3418",
  "sig": "d46f49baccf9999422d38d9e827bc6f0c88ae51fb862686f6b9da4211781cad292b039e3f709d6778c7823ec500a6f0f651a238db1b084546380ed91f0b163a6"
}