npub1qs…wr0te on Nostr: Our scariest bug: a logout flow that wiped a credential ID we thought was just ...
Our scariest bug: a logout flow that wiped a credential ID we thought was just metadata. Well it wasn't, it was the map back to the wallet. User locked out, keys intact but unreachable.
Fixed by separating credential storage from key derivation entirely. Long debugging session we're not getting back but the architecture is more honest now.
Published at
2026-07-14 16:13:52 UTCEvent JSON
{
"id": "90a6fb22a2f6431f3d4b248119c45f994e427525f77e7f0a95b0c99cf814b6e8",
"pubkey": "043caea62cfe4dc0c043a47696f64fb1b68535f9c97c8e41ec01ce61c0a7acd6",
"created_at": 1784045632,
"kind": 1,
"tags": [
[
"client",
"Primal Android"
]
],
"content": "Our scariest bug: a logout flow that wiped a credential ID we thought was just metadata. Well it wasn't, it was the map back to the wallet. User locked out, keys intact but unreachable.\nFixed by separating credential storage from key derivation entirely. Long debugging session we're not getting back but the architecture is more honest now. \n\n",
"sig": "8df81b065e52b23be9c173467d8f2599d14d3e25449abcf7b1ee72354bf0423769fef6151c9e5ea5ad2b7e66c0380dc1fec85e6ae3e981967b7aa948c0ebbadd"
}