CashuPayServer v0.5.5-alpha is out.

If you switched your store to a different mint on 0.5.4, payments could get stuck in "Processing". This release fixes it, and those payments are credited once you upgrade. It also runs on PHP 8.1 and 8.2 now, and a standalone install sitting inside a WordPress site's folder no longer answers 403.

WooCommerce shops can save the BTCPay plugin settings without the key being rejected, and a customer who retries paying an order gets the payment page instead of a 404.

The QR libraries used to load from CDNs, including on the admin page that can show your seed phrase. They ship with the app now.

There's also a signed emergency shutdown. If we ever find a hole that lets strangers take your money, we can publish a notice signed with a Nostr key, and installs on the affected versions stop until they're upgraded. Nothing moves your funds. If you'd rather not have it, turning off the update check in Settings turns it off too.

Reasoning for doing this in this blog: https://juraj.bednar.io/en/blog-en/2026/09/18/ten-ai-models-vs-embargoed-core-lightning-a-case-study-of-ai-for-auditing/ (Section "Signed kill switch"). I wish other Bitcoin projects included something like this.

Upload it over your old install and keep the data folder.

https://github.com/jooray/cashupayserver/releases/tag/v0.5.5-alpha

CashuPayServer v0.5.4-alpha is out — a security and reliability release.

CashuPayServer lets a small shop accept Lightning payments by speaking BTCPay Server's API, so e-commerce plugins built for BTCPay work with it by just changing one URL. No node or BTCPay instance; it runs on ordinary PHP shared hosting and settles through a Cashu mint.

Four AI audits went over the server and the wallet library, and this release fixes what they found: fee handling on withdrawals, a double-spend path in exports, an amount-check bug, and an invoice-status check that stopped working after the first try.

Still alpha. Keep balances small and withdraw often (or automatically).

https://github.com/jooray/cashupayserver/releases/tag/v0.5.4-alpha

CashuPayServer v0.4.1-alpha ⚡

Accept Lightning on the PHP hosting you already have.

This release is about not losing track of a single sat:

Recover funds from a previous mint — if a mint change ever stranded a balance, scan and export it back as a claimable token

Changing a store's mint now warns and offers export instead of silently stranding funds

New "Recent Transfers" ledger on the dashboard: every Lightning withdrawal, auto-withdrawal, token export and donation, in one place

Upgrading never touches your ecash — the DB is separate and migrates itself. Still alpha; start small, keep your seed safe.

https://github.com/jooray/cashupayserver/releases/tag/v0.4.1-alpha

cashu-wallet-php v0.1.0 — first tagged release 🥜

A single-file, zero-dependency PHP implementation of Cashu. Drop
CashuWallet.php into any PHP 8 project and go.

Covers NUT-00/01/02/03/04/05/07/08/09/12/13/19/20 — including keyset v2,
NUT-13 HMAC derivation, DLEQ verification, and NUT-20 BIP340 quote locking.
Crash-safe operation journal, so you don't lose coins mid-swap or mid-melt.

284 tests, validated against the official Cashu spec vectors.

Still very alpha, feedback appreciated.

https://github.com/jooray/cashu-wallet-php/releases/tag/v0.1.0

CashuPayServer v0.4.0-alpha is out ⚡

Accept Lightning payments on the plain PHP hosting you already have. Your existing BTCPay / WooCommerce plugin just works.

· Keyset v2 + correct NUT-13 derivation — your seed stays a real backup
· NUT-20 quote locking (BIP340) — a leaked quote id can no longer mint your money
· DLEQ verification + automatic keyset rotation
· Lightning withdrawals that reconcile instead of getting stuck

Still alpha: start small, keep your seed safe.

https://github.com/jooray/cashupayserver/releases/tag/v0.4.0-alpha

CashuPayServer v0.3-alpha has some security and reliability fixes. Give it a try and definitely upgrade if you are using the older version.

The biggest threat to the circular economy isn't regulation, but laziness. We outsource our payments to "convenient" gateways because we're afraid of the tech stack.

CashuPayServer was built to kill that fear. It’s a lightweight, PHP-based Lightning gateway that settles via Cashu. It’s as easy to install as a contact form and as private as a cash transaction.

Don't wait for the "official" circular economy. Build it on your own server today.

If you need a KYC'd third-party gateway to accept Bitcoin, you aren't using Bitcoin. You're just using a slower, more expensive version of Stripe. Good for adoption for clients, but if you are a merchant, you're missing out.

True sovereignty means owning the checkout. CashuPayServer lets you accept Lightning payments directly on your own WordPress site (or anywhere where BTCPay is supported - prestashop, ...) without asking a corporate middleman for permission.

Yes, it runs on your $5/month hosting that you already have. No node/VPS/docker required. Just install as wordpress plugin or unzip (in case of non-wordpress install), configure and you are good to go.

https://cashupayserver.org/

Why is it so hard to sell a digital PDF for Bitcoin without using a centralized platform that takes a 10% cut?

CashuPayServer is the missing link for the independent creator. It’s a one-click WordPress/WooCommerce plugin that turns any basic website into a professional Lightning storefront. Keep 100% of your sats. Own 100% of your data. Free and Open Source.

Your shop, your rules.

Privacy isn't just for customers; it's for merchants too. Why should your payment processor know your turnover, your products, or your customer's identity?

CashuPayServer uses Cashu mints for settlement of Lightning payments. This creates a "privacy buffer" between your shop and the network. The mint sees the Lightning payment; you see the credit. Nobody sees the link between the two except you.

Why Cashu mint? The easiest way to accept Lightning and not run a Lightning node. And yes, it can immediately withdraw to a real non-custodial Lightning wallet.

Accept Lightning with "Stealth Mode" enabled.