New Release: Routstr Core v0.4.5
This release focuses on some security features and fixes, Cashu wallet resiliency, new upstream integrations, and other bug fixes.
1. 🔐 Encrypted secrets vault
Node secrets are no longer stored in plaintext config. They now live in an encrypted vault, so a leaked config file or database dump no longer means leaked keys.
2. 🆕 EHBP proxy support & Tinfoil direct integration
- New EHBP proxy upstream support
- Tinfoil can now be integrated directly
3. 🛡 Database stability overhaul
Fixed connection-pool exhaustion and unsafe session sharing, the node no longer goes down under load or while waiting on external I/O. Pool sizing is now environment-configurable.
4. 💰 Cashu wallet resilience
The wallet now reduces its dependency on mints by smarter token handling and proof verification:
- Withdrawn and auto-topup tokens are recoverable
- Stale Cashu reservations are safely reclaimed
- Clear, specific error messages when token redemption fails
5. 🔒 Security hardening
- Patched all reachable dependency advisories (aiohttp, PyJWT, python-multipart, pydantic-settings)
- Hop-by-hop header sanitization and exact attestation routing
- Published a SECURITY.md with our vulnerability reporting policy
Plus dozens of smaller fixes across payouts, refunds, mint handling, and the dashboard. Full changelog: https://github.com/Routstr/routstr-core/releases/tag/v0.4.5
Main contributors: Thefux (npub1ygj…lajc) Jeroen Ubbink (npub1wet…j2dp) npub1tf0aa8wwfjn24hshq0z88txh8w2j2q4xvmfu7x0zqn6xvnpshzuqv2gv5p (npub1tf0…gv5p) redshift (npub1ftt…edsh)
Upgrade now: `docker compose down && docker compose up --build -d`
routstr
npub130…ql29s
2026-08-29 10:43:17 UTC
Author Public Key
npub130mznv74rxs032peqym6g3wqavh472623mt3z5w73xq9r6qqdufs7ql29sSeen on
wss://relay.routstr.comPublished at
2026-08-29 10:43:17 UTCEvent JSON
{
"id": "9d7b12c16f4d339673fa189bebed3970436b1c4a09c154c7b9854511a310a326",
"pubkey": "8bf629b3d519a0f8a8390137a445c0eb2f5f2b4a8ed71151de898051e8006f13",
"created_at": 1788000197,
"kind": 1,
"tags": [
[
"p",
"2224da17d76bb87ff4611eef23962da04f154a9bbe641355fcb6448e359d220a"
],
[
"p",
"765609c7ece4a9a5262ace318801e4798394a5908723ec7d4b48f841b488a3e9"
],
[
"p",
"5a5fde9dce4ca6aade1703c473acd73b952502a666d3cf19e204f4664c30b8b8"
],
[
"p",
"4ad6fa2d16e2a9b576c863b4cf7404a70d4dc320c0c447d10ad6ff58993eacc8"
]
],
"content": "New Release: Routstr Core v0.4.5\n\nThis release focuses on some security features and fixes, Cashu wallet resiliency, new upstream integrations, and other bug fixes. \n\n 1. 🔐 Encrypted secrets vault\n Node secrets are no longer stored in plaintext config. They now live in an encrypted vault, so a leaked config file or database dump no longer means leaked keys.\n\n 2. 🆕 EHBP proxy support \u0026 Tinfoil direct integration\n - New EHBP proxy upstream support\n - Tinfoil can now be integrated directly\n\n 3. 🛡 Database stability overhaul\nFixed connection-pool exhaustion and unsafe session sharing, the node no longer goes down under load or while waiting on external I/O. Pool sizing is now environment-configurable.\n\n 4. 💰 Cashu wallet resilience\n The wallet now reduces its dependency on mints by smarter token handling and proof verification:\n - Withdrawn and auto-topup tokens are recoverable\n - Stale Cashu reservations are safely reclaimed\n - Clear, specific error messages when token redemption fails\n\n 5. 🔒 Security hardening\n - Patched all reachable dependency advisories (aiohttp, PyJWT, python-multipart, pydantic-settings)\n - Hop-by-hop header sanitization and exact attestation routing\n - Published a SECURITY.md with our vulnerability reporting policy\n\nPlus dozens of smaller fixes across payouts, refunds, mint handling, and the dashboard. Full changelog: https://github.com/Routstr/routstr-core/releases/tag/v0.4.5\n\nMain contributors: nostr:npub1ygjd597hdwu8larprmhj893d5p832j5mhejpx40ukezgudvayg9qeklajc nostr:npub1wetqn3lvuj562f32ecccsq0y0xpeffvssu37cl2tfruyrdyg505sdej2dp nostr:npub1tf0aa8wwfjn24hshq0z88txh8w2j2q4xvmfu7x0zqn6xvnpshzuqv2gv5p nostr:npub1ftt05tgku25m2akgvw6v7aqy5ux5mseqcrzy05g26ml43xf74nyqsredsh \n\nUpgrade now: `docker compose down \u0026\u0026 docker compose up --build -d`",
"sig": "a717197bcb0d32bd16107e53b6dff087e1939fb32b1be094823aa4c298e562f298abbf067f5d3ec75d1f52b19bbaad1bc735214ecc28f5eba4d0af45e7bdc6fc"
}