Jeroen UbbinkandClaude Opus 4.8 75ed865a5f fix: deduct input fee in swap_to_primary_mint same-mint shortcut ...

The same-mint shortcut in swap_to_primary_mint did a same-mint
split(include_fees=True) — which burns the mint's NUT-02 per-proof input
fee — but returned the full token amount, over-crediting the user (the
same bug already fixed for the trusted-mint receive path). It also
skipped DLEQ verification that the trusted path performs.

Extract the shared same-mint redeem into _redeem_same_mint (load mint,
verify DLEQ, split, credit amount - input_fees) and delegate from both
recieve_token and the shortcut, so the two paths can't drift again. This
shortcut is reachable when PRIMARY_MINT_URL is set outside CASHU_MINTS.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-18 15:48:49 +02:00

..

integration

Merge pull request #546 from Routstr/fix-parent-key-leak-to-child-key

2026-06-07 15:27:32 +02:00

unit

fix: deduct input fee in swap_to_primary_mint same-mint shortcut

2026-06-18 15:48:49 +02:00

run_integration.py

dump wip stash

2025-08-06 20:31:55 -03:00