yes nitro signs it
no an HSM cannot do the required math for cashu. even if it does, it exposes itself to the risk that it is lied to about the success/failure of payments from the outside LN node, so it must operate as a closed system. also the HSM can just be smashed
an attacker can also just deny access to the mint. they could say that you can get 50% of your ecash back, but only by sending your tokens to them. the user can either do nothing (and lose it) or try (and probably get it back, but also net the attacker money). the second case is the only one that is good for the user
semisol
npub122…cgrkj
2026-05-29 22:18:13 UTC
in reply to nevent1q…daed
Author Public Key
npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkjSeen on
wss://nostr.sathoarder.com/intent:nostr.sathoarder.com/sathoarder@sathoarder.comwss://nos.lolPublished at
2026-05-29 22:18:13 UTCEvent JSON
{
"id": "617824b103982806192d6868063f6582b9ab479420b53377732b12a5bc8c322c",
"pubkey": "52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd",
"created_at": 1780093093,
"kind": 1,
"tags": [
[
"e",
"5e89340a167b517204554341690d399288b7f4e797a67063e7bf03e2ef3993d9",
"",
"root",
"50d94fc2d8580c682b071a542f8b1e31a200b0508bab95a33bef0855df281d63"
],
[
"e",
"d6572ba51f52c7b268c362c83ba55f62f49956350b24d6570b56bee8ffcb96f3",
"wss://eden.nostr.land/",
"reply",
"576d23dc3db2056d208849462fee358cf9f0f3310a2c63cb6c267a4b9f5848f9"
],
[
"p",
"50d94fc2d8580c682b071a542f8b1e31a200b0508bab95a33bef0855df281d63"
],
[
"p",
"7c4bd52d032a3cd7ed97d9fcb14aacbbf76a1dc4e797c6cd206838b0d543a3dd"
],
[
"p",
"576d23dc3db2056d208849462fee358cf9f0f3310a2c63cb6c267a4b9f5848f9",
"wss://eden.nostr.land/"
],
[
"p",
"52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd"
]
],
"content": "yes nitro signs it\n\nno an HSM cannot do the required math for cashu. even if it does, it exposes itself to the risk that it is lied to about the success/failure of payments from the outside LN node, so it must operate as a closed system. also the HSM can just be smashed\n\nan attacker can also just deny access to the mint. they could say that you can get 50% of your ecash back, but only by sending your tokens to them. the user can either do nothing (and lose it) or try (and probably get it back, but also net the attacker money). the second case is the only one that is good for the user",
"sig": "173411390f226316cbf98e2235868e6bd863b3f3173d868d5e98f82ddfc675938506c0bd222663238a74580b6f491ba12cd83fd857bcad53282c7539ab379676"
}