🚨 If you connected your NWC wallet to Bitcoin Quest, please rotate your connection (remove it inside your wallet and connect again) - your funds may be at risk
Security Notice
Alert to Nostr users who have signed into our app, Bitcoin Quest, using Nostr Wallet Connect (NWC):
A vulnerability has been exposed, and you should rotate your connection string secret by generating a new NWC URI from your wallet app.
This is a precaution because the secret is visible to whoever operates the relay endpoint in the NWC URI. We recommend rotating your secret to be on the safe side.
We caught this vulnerability during a Kimi K3 audit of our code and have already patched it so nothing like this will happen again.
We’re always doing our best to make sure our app is secure, and we apologize this happened. The broader industry is on high alert right now for obvious reasons. If you’re running code, audit it with multiple frontier AI models as soon as possible, especially if you control user funds, which we do not on Bitcoin Quest.
If you have any questions or concerns, please reach out to us at info.603btc@gmail.com.
Thank you.