CashApp has inactive LNAddress endpoints with npubs pregenerated for EVERY user \ stacker news ~devs

CashApp has inactive LNAddress endpoints with npubs pregenerated for EVERY user cash.app/.well-known/lnurlp/jack

3377 sats \ 25 comments \ @bitcoinplebdev 28 May devs

I heard that cashapp has been working on lightning address for awhile so I've been checking these endpoints every now and then. They've been returning nothing until recently where now they are returning the full valid LUD06 object along with the nip57 "allowsNostr" and "nostrPubkey" properties. (So Zaps are on the table through cashapp??)

You can find your endpoint by replacing "jack" in the url with your cashtag.

The callbacks return unauthorized when I try to hit them for an invoice which makes me wonder if cashapp is setting up LUD18 for auth/compliance on these endpoints?

Anyway found this interesting, thought I would share, cheers!

view all related items

334 sats \ 1 reply \ @bitcoinplebdev OP 28 May

MISLEADING TITLE!

I was conflating the nostrPubkey field as being "pregenerated" for each user but this is not true! In the nip57 spec the nostrPubkey field is used to verify where the zapReceipt is coming from. You notice every endpoint has the same npub, this is cashapps one keypair they'll be using to sign zapRecipts.

So yeah nothing crazy here, they're just setup for lnaddress and zaps.

20 sats \ 0 replies \ @calle 28 May

yup 🤝

436 sats \ 1 reply \ @kilianbuhn 28 May

Wake me up when every square POS gets an ln address. We're waiting.

1 sat \ 0 replies \ @PlebeiusG 28 May

💯 🥱

337 sats \ 4 replies \ @janetyellen 28 May

You will KYC to send to CASH APP users and you will be happy. Jerome and I need this data so we can centrally plan the economy and enslave be plebians

11 sats \ 3 replies \ @nerd2ninja 28 May

Be careful with all of that Secretary Yellen

0 sats \ 2 replies \ @Hamstr 28 May

Did she say this is a speech or something? I can't imagine her saying such things.

23 sats \ 1 reply \ @nerd2ninja 28 May

OMG hamstr no, I'm responding to a parody account and playing along XD. I like to pretend the impersonators are the real person sometimes just to see how the impersonator thinks the person they're acting as would react lol.

0 sats \ 0 replies \ @Hamstr 28 May

PFFFT hahha okay! gotcha

😀😀😁😂

62 sats \ 0 replies \ @davidw 28 May

bitcoinplebdetective hat unlocked

49 sats \ 0 replies \ @k00b 28 May

Months ago I got a nostr dm from a Cash App dev who was testing against our lightning addresses.

https://cash.app/.well-known/lnurlp/keyank

40 sats \ 0 replies \ @andreneves 28 May

did we do it guys?

30 sats \ 4 replies \ @itsrealfake 28 May

appears it doesn't work for all cashtag names. works for mine, but not for some of my contacts.

11 sats \ 3 replies \ @030a29f333 28 May

I wonder if it's just for users who've interacted with bitcoin in some way? Didn't work for the contacts I tired either but did for my own.

10 sats \ 2 replies \ @itsrealfake 28 May

i was thinking it might have been a kyc thing.. your suggestion makes more sense

33 sats \ 1 reply \ @030a29f333 28 May

Just went through my whole contact list and tried every cash tag. I know for sure one person who's a bitcoiner and their's returned. Nobody else tho.

Thinking through the moral implications of what I just did...

7 sats \ 0 replies \ @itsrealfake 28 May

lol.. cashapp in the process of doxing its bitcoiner clients.

20 sats \ 0 replies \ @benthecarman 28 May

woah

10 sats \ 0 replies \ @TheWildHustle 28 May

Huge news

1 sat \ 1 reply \ @falsefaucet 28 May

maxsendable, ~1.5m sats

16 sats \ 0 replies \ @1GLENCoop 29 May

I looked up my own at https://cash.app/.well-known/lnurlp/btcgc, saw this: maxSendable 1457943000

I tried sending myself 2 sats to what looked like a lightning address in the output (btcgc@cash.app) a few times. Each send attempt (from zeus) failed with this error message:

0 sats \ 0 replies \ @idsera 4 Jun

Will this be compatible with https://www.uma.me/ protocol?

0 sats \ 0 replies \ @Coinsreporter 29 May

This is sending some serious shock waves to Venmo and PayPal. In an urgency to remain in competition, they are holding board meetings in their respective headquarters.

0 sats \ 0 replies \ @BlokchainB 28 May

👀

0 sats \ 0 replies \ @030a29f333 28 May

👀