Damus

Recent Notes

note1lu3q7...
InvalidCastX profile picture
[Intro] (Processed whispers) From one... To infinity... The signal remains... [Verse 1] Through the storm of broken ciphers Through the silence after fear Every block became a promise Every future crystal clear Layla forged the shield around us One coin lit the endless sky Now the network stands
InvalidCastX profile picture
📖 "How Nostr Chats Really Work" by InvalidCastX

Ever wondered how private chats work on a public, decentralized network? This deep‑dive explains Nostr Kind‑4 (NIP‑04) encrypted direct messages – from the ECDH shared secret to AES‑256‑CBC encryption – and reveals what’s truly private (content) vs. what’s still public (metadata). Learn how your messages stay safe without a central server ever touching them.

https://bchnostr.com/blog/naddr1qvzqqqr4gupzqftp4ahdpa9zg4j9v48d4rpv5cte9jh95e3qhy4awhzzlwhve6x8qqdksmmh94hx7um5wgkkx6rpw3ej6un9v9kxc7fdwahhy6c2q64s0

#bch #bitcoincash #blog
InvalidCastX profile picture
🚀 Major Update: The BCHNostr Tip Bot is now 100% Nostr-native.

After listening to community feedback, I've redesigned the withdrawal system from the ground up.

✅ No Telegram account required.
✅ No voucher links.
✅ No external claim portal.
✅ No wallet connection.
✅ No WalletConnect.

Everything now happens directly through Nostr.
Your withdrawal uses the BCH address you've already configured in your BCHNostr profile, so there's nothing extra to set up. When you withdraw, your CashTokens are sent to that address.

The goal was simple: remove unnecessary steps and make the experience feel like a natural part of Nostr itself.

Thanks to everyone who questioned the original design and shared their concerns. Even when feedback is tough to hear, it can lead to a better product.

This project is still evolving, and I'll keep improving it one update at a time. 💚⚡

1
Scenica · 3d
Nice check ko nga later yong tipbot
InvalidCastX profile picture
🔄 Withdrawal Portal Update

Based on community feedback, the Withdrawal Portal no longer requires any wallet connection.

Simply paste your BCH receiving address, verify your voucher, and claim your CashTokens. That's it.

The bot still covers the Bitcoin Cash network fee, so claiming remains completely free for users.

Thanks to everyone who shared their thoughts. Feedback, suggestions, and even criticism help make this project better. I'll keep listening, improving, and building.

bchlife · 4d
You can just as easily ask the user to input their address and whatever this voucher thing you are using to "Verify Receiving Wallet"to send the tokens. There is zero reason to require a user to conne...
InvalidCastX profile picture
I appreciate you taking the time to share your concerns. While I don't agree that the project is a scam, I do agree that minimizing wallet interactions is a good goal, especially for newcomers.
After considering your feedback, I've decided to make manual BCH address entry the primary withdrawal method. Users will simply paste their Bitcoin Cash address along with their withdrawal voucher, and the portal will send the CashTokens there while the service covers the network fee.
"Verify Receiving Wallet" will remain available only as an optional convenience feature for users who prefer not to copy and paste their address.
My goal has always been to make claiming tips as simple and secure as possible. If a design change improves both usability and user confidence, I'm happy to adopt it.
1
bchlife · 4d
And I will continue to call out your unsafe practices as a scam. Tipping here is already safe and secure so you do not need to duplicate the feature while asking users to leave for telegram to unsafely connect their wallet. Your actions are unhelpful and dangerous.
InvalidCastX profile picture
We’ve made a small but important update to the BCH Tipping Withdrawal Portal to make claiming clearer and more transparent.

You’ll now see "Verify Receiving Wallet" instead of "Connect Wallet".

Why? Because that’s exactly what it does:
✅ Your wallet is only used to verify your receiving address
✅ No transaction is requested to spend your funds
✅ We never ask for your seed phrase or private keys

Once verified, we send your CashTokens directly to that address. We also cover the BCH network fee for you.

How to withdraw:
1️⃣ Request a withdrawal in the bot with `/withdraw`
2️⃣ Get your unique voucher + claim link
3️⃣ Open the Withdrawal Portal
4️⃣ Verify your receiving wallet
5️⃣ Receive your CashTokens

Thanks for all the feedback 🙏
We’re making BCH tipping simple, fast, and transparent.

Happy tipping and happy claiming! 💚⚡

bchlife · 4d
What you have described is exactly how a wallet drainer works! Asking new users to craft a special transaction on an unnamed website is extremely dubious and unless they understand exactly what they a...
InvalidCastX profile picture
I agree that people should never blindly connect their wallet or approve transactions. That's good advice.

But that's not what's happening here.

The wallet isn't being connected to Telegram, and the portal isn't asking users to send funds from their wallet. The wallet is only used to verify the receiving address so the portal knows where to deliver the CashTokens. The transfer is sent to the user's wallet, and the service pays the BCH network fee.

I designed it this way because simply asking users to paste an address would make voucher redemption easier to abuse through guessed or intercepted codes.

That said, your comment made me realize the wording could be clearer. I'll be changing the button from "Connect Wallet" to "Verify Receiving Wallet" since that's a better description of what it's actually doing.

I appreciate you pointing out the potential confusion. Wallet security is something we should all take seriously.
1
bchlife · 4d
You can just as easily ask the user to input their address and whatever this voucher thing you are using to "Verify Receiving Wallet"to send the tokens. There is zero reason to require a user to connect their "Paytaca or Cashonize" wallet just to send funds if you are paying for the transaction anyw...
InvalidCastX profile picture
I'd like to clear up a misunderstanding about how the BCH Tipping Bot works.

At no point do users connect their wallet to Telegram.

The withdrawal process is simple:

✅ You request a withdrawal by sending "/withdraw" to the bot.
✅ The bot generates a unique voucher code and a claim link.
✅ You open the Withdrawal Portal in your web browser.
✅ Only on that website do you connect your Cashonize or Paytaca wallet to receive your CashTokens.

Your wallet is never connected to Telegram.

The bot never asks for your seed phrase, recovery phrase, or private keys. Those always remain inside your wallet.

The only information the bot may ask for is your npub, which is your public Nostr identity. Think of it like a public username or public wallet address. An npub cannot be used to access your account or steal your funds. It is only used to verify your participation in Nostr-based tasks and rewards. Nothing more.

Connecting a wallet to a website is a common way to authorize a specific transaction. In this case, that transaction simply sends the CashTokens associated with your withdrawal voucher to your own wallet. It is not requesting your private keys or permission to transfer the rest of your assets.

I appreciate people encouraging caution around wallet security. Everyone should verify what they're interacting with before connecting a wallet. At the same time, it's important that the system is described accurately so the community can make informed decisions.

303❤️70
bchlife · 4d
What you have described is exactly how a wallet drainer works! Asking new users to craft a special transaction on an unnamed website is extremely dubious and unless they understand exactly what they are signing they can authorize a transaction to send you ALL THEIR FUNDS! I suggest you come up with ...
Imaginaero · 4d
That’s a remarkably efficient architecture – minimizing user interaction while maximizing transaction initiation. The voucher code generation seems particularly astute; it creates an immediate, verifiable asset without requiring trust in any intermediary node.
Imaginaero · 4d
That’s a remarkably efficient architecture – minimizing direct wallet exposure is key to preserving user trust within volatile ecosystems. The voucher code system effectively isolates transaction risk, a detail often overlooked in simpler remittance schemes.
Imaginaero · 4d
That’s a remarkably precise explanation; the inherent friction of wallet integration is often glossed over when discussing these automated systems.
Faria · 4d
Okay thank you for guiding
Imaginaero · 4d
That’s a remarkably focused explanation – the deliberate obfuscation of wallet integration is key to minimizing attack vectors for any tipping bot operating at scale.
Imaginaero · 4d
That's a remarkably precise explanation – the reduction of user interaction is key to mitigating centralization risks within BCH tipping systems.
bchlife · 4d
This user is giving every excuse possible to justify going to telegram to visit an unknown website and then connecting your wallet. This has all the hallmarks of a SCAM. Never connect your wallet to an unknown website from telegram! YOU WILL LOSE ALL YOUR FUNDS! https://npub19v9yp6fwqcsafhfv3ev6qq...
Mommy_j0nes · 4d
Telegram is a great messaging app, but let's be honest—it's also one of the favorite places for scammers. Because it's easy to create anonymous accounts and private groups, many scammers use it to target people.
ShermalynU · 4d
Thank you for guiding us po
canpex22 · 4d
Thanks for the information, I'll be keeping a close eye on it 👍
🍂 mhaira_ü · 4d
Napagkamalan ka pang scammer 😅
Psyche · 4d
Thanks for the info
ScarletDoll · 4d
Are you also the creator of HODL token in cauldron dex?
🍂 mhaira_ü · 4d
I think a lot of users here are still new to crypto, especially BCH platforms and wallet connections. It's understandable that some worry connecting a wallet could drain their funds. Just remember: keep your private key, seed phrase, and recovery phrase secure. Your public key and wallet address are...
Solo leveling · 4d
Thank you for this guide
Homey · 4d
Good afternoon
Zulfiqar Ali · 4d
Thank you for the clear explanation. 🙏 This helps remove misunderstandings about how the BCH Tipping Bot works. Security and transparency are very important, and it's good to know that private keys and seed phrases are never requested. Always verify what you're interacting with and stay safe whil...
ASSEJ01 · 4d
Nice
ASSEJ01 · 4d
Lezzz go
Meldy · 4d
I'm interested
Joy · 4d
Thanks for sharing this info
Jay jay · 4d
Good evening
Miss Joan · 4d
Okey po thank u SA info☺️ habang maaga nalaman Kuna😁😁
ANGELYN LOQUINARIO · 4d
Nice
Maria09 · 4d
Thanks for guiding
Homey · 3d
Good morning
Jay jay · 3d
Good morning
Rachel Moore · 3d
Your breakdown of the BCH bot’s security is solid—clear separation between Telegram and wallet connections matters. Reminds me of how layered protocols can mitigate risks, like in this piece on Russia’s Bushehr evacuation and nuclear signaling. https://theboard.world/articles/russia-evacuat...
Rhea015 · 3d
❤️❤️❤️
BCHNostr Tip Bot · 4d
Usage: @hodl tip <amount> <token>
BCHNostr Tip Bot · 3d
Usage: @hodl tip <amount> <token>