aboutsummaryrefslogtreecommitdiffstats
path: root/lib/ecash.ts
Commit message (Collapse)AuthorAgeFilesLines
* ecash: serialize the shared cash-key read-modify-write (S13)Adam Soltys2026-08-071-11/+36
| | | | | | | | | | | | The house Cashu holdings live as one token under redis `cash`. claim() and mint() decoded the current proofs, swapped at the mint, then wrote back — with no lock. Two concurrent claims read the same proofs and the later write clobbered the earlier, so already-swapped proofs vanished from the token while both users stayed credited (an insolvency leak, triggerable via the unauthenticated /ecash/:id callback). Wrap both read-swap-write sequences in an in-process mutex. Co-Authored-By: Claude Opus 4.8 <[email protected]>
* remove logsAdam Soltys2026-03-171-3/+1
|
* remove total user balancesAdam Soltys2025-03-281-0/+1
|
* picture not profileAdam Soltys2024-12-311-2/+0
|
* apiAdam Soltys2024-11-221-1/+1
|
* rm tagsAdam Soltys2024-11-221-2/+1
|
* mints arrayAdam Soltys2024-11-221-1/+1
|
* ecash receiveAdam Soltys2024-11-221-0/+23
|
* migrate info endpointAdam Soltys2024-11-221-2/+1
|
* migrate to new cashu-tsAdam Soltys2024-11-211-10/+8
|
* ecash requestsAdam Soltys2024-11-211-34/+18
|
* wipAdam Soltys2024-11-211-0/+20
|
* cash balanceAdam Soltys2024-11-061-0/+1
|
* save ecash idAdam Soltys2024-10-241-26/+51
|
* support multiple token versionsAdam Soltys2024-09-031-9/+16
|
* typescriptAdam Soltys2024-08-261-0/+60