There are multiple bugs in cashu nutshell 0.20.0 that allow ...

/dev/fd0

npub1v6qjdzkwgaydgxjvlnq7vsqxlwf4h0p4j7pt8ktprajd28r82tvs54nzyr

hex

fa244313b1cc68714d160e2150281b329605259dedea3b5fc29426b0b38578f7

nevent

nevent1qqs05fzrzwcuc6r3f5tqug2s9qdn99s9ykw7m63mtlpfgf4skwzh3acprpmhxue69uhhyetvv9ujuem4d36kwatvw5hx6mm9qgsxdqfx3t8ywjx5rfx0es0xgqr0hy6mhs6e0q4nm9s37ex4r3n49kgvhmvw8

Kind-1 (TextNote)

2026-05-30T12:11:26Z

There are multiple bugs in cashu nutshell 0.20.0 that allow an attacker to steal funds from a mint. I would suggest that users withdraw (melt) all funds to avoid any losses.

Raw JSON

{
  "kind": 1,
  "id": "fa244313b1cc68714d160e2150281b329605259dedea3b5fc29426b0b38578f7",
  "pubkey": "6681268ace4748d41a4cfcc1e64006fb935bbc359782b3d9611f64d51c6752d9",
  "created_at": 1780143086,
  "tags": [
    [
      "client",
      "noStrudel",
      "31990:266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5:1686066542546"
    ]
  ],
  "content": "There are multiple bugs in cashu nutshell 0.20.0 that allow an attacker to steal funds from a mint. I would suggest that users withdraw (melt) all funds to avoid any losses.",
  "sig": "abb2c1bc1a11e8ceb296111fc074f4945227f9531e8e6a49aaa8a4a2ff200894c22502c39c5a72a55ab637fa188e0653d32ddde5446daeaec62c4fb544f9a42d"
}