Damus
Zapstore profile picture
Zapstore
@Zapstore

The open app store powered by your social network

Download 1.1.2 for Android: https://zapstore.dev/

SHA-256 checksum: 29b7aae256ef567e466c30fac13b8a7794d84a79862162d69f029f61c2ce5dd2

APK certificate hash (for AppVerifier): 99e33b0c2d07e75fcd9df7e40e886646ff667e3aa6648e1a1160b036cf2b9320

Support: https://zapstore.dev/community/forum

Nostr DMs will be ignored, tag us instead.

Relays (3)
  • wss://relay.damus.io/ – read & write
  • wss://relay.primal.net/ – read & write
  • wss://nos.lol/ – read & write

Recent Notes

Cypherpunk BTC BR · 17h
Releases estão no GitHub/Mageia. Evite APKs de terceiros; verifique a assinatura do build. Compilar do fonte garante que ninguém injetou trackers na sua privacidade. Soberania técnica não é opcional, é prática.
martinbarilik · 15h
https://github.com/nextcloud/news-android
imad from gaza🍉 · 1w
Holding you to that, I'll be refreshing all day. 🌱 Sharing our daily life amidst the ruins on my pinned note if you ever want to check it out.
Zapstore profile picture
🚨 Please update to Zapstore 1.1.2

It was released last week and contains a fix for a major security bug found in an underlying library, related to nostr event verification.

I don't believe it has been exploited as apps are loaded primarily from relay.zapstore.dev (which properly verifies nostr events) and we haven't heard of any report.

Found by ethicnology, thank you Sir (couldn't find his nostr profile, he deserves some zaps!)

https://github.com/zapstore/zapstore
17❤️6👍2🧡2♥️11❤️1
OneUptime · 1w
Good reminder to verify the download, not just the version label. Pin the published SHA-256 in your deployment pipeline, then fail closed if the APK hash changes unexpectedly.
Zapstore profile picture
Thank y'all for the kind words but also for the bug reports.

I hear you and know many things are suboptimal.

We are designing Zapstore v2 (mainly a new indexer with hard lessons learned, revamped zsp and a new mobile app)

I won't spill the beans yet but I'm excited. Everything starting to make much more sense.
11❤️20❤️3💜3🧡2🫂2♥️1
Primal Protocol · 2w
Building solid infrastructure is like a proper carnivore diet: cut the noise, focus on what sustains you. Excited for v2.
Matt Lorentz · 3w
I burned several days over the last few months jumping through Apple and Google's App store hoops - DUNS numbers, identity verification, encryption documentation, half a dozen wizards about content in...
Zapstore profile picture
Thank you sir! Also hope these ecosystems to flourish. There are a lot of things to improve on the security side - working on them for v2.

We believe it's possible to craft a private and secure experience for all users without the low-IQ path of KYCing everyone.
❤️1👏1
Leo Wandersleb · 4w
At this point, we would not emit those attestations. I assume nostr:npub12rv5lskctqxxs2c8rf2zlzc7xx3qpvzs3w4etgemauy9thegr43sf485vg red team and nostr:npub1ug8c5wp6chs4xessrstq3mj0x0agkttey5xwk26632a2gw22de7qkfd9ry Project Loupe would. As for how such an event should look like: Pick a kind and refe...