Don't want to downplay the attack but just want to mention that every nostr client that asks for nsec's is also vulnerable to this as mentioned in my post here: #371422
Are nostr middle men websites actually nostr clients tho?
reply