security

2 posts with the tag “security”

Dead Keys: The Unsolved Problem of Marking Compromised Nostr Identities

Mar 20, 2026

Once a Nostr private key leaks, how do you mark the identity as dead — permanently, verifiably, and in a way the attacker cannot undo? We examined every existing mechanism in the protocol. None of them work. Here is what could.

Uncovering Exposed Private Keys Across the Nostr Network

Mar 17, 2026

BigBrotr

Core Team

We searched 41 million Nostr events for private keys published in plaintext. After filtering out noise, 38 real accounts with over 21,000 combined followers are actively using a compromised key with no signs of awareness.