Minenclownvia treechat·1mo
❤️ 9 Likes · ⚡ 0 Tips
{
  "txid": "0243a9fb52f638c6bf45b2e4866e574b8b1beadcabbe096166c87c255bf449c0",
  "block_height": 0,
  "time": null,
  "app": "treechat",
  "type": "post",
  "map_content": "Test Post",
  "media_type": "text/markdown",
  "filename": "|",
  "author": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "display_name": "Minenclown",
  "channel": null,
  "parent_txid": null,
  "ref_txid": null,
  "tags": null,
  "reply_count": 5,
  "like_count": 9,
  "timestamp": "2026-03-17T10:33:35.000Z",
  "media_url": null,
  "aip_verified": true,
  "has_access": true,
  "attachments": [],
  "ui_name": "Minenclown",
  "ui_display_name": "Minenclown",
  "ui_handle": "Minenclown",
  "ui_display_raw": "Minenclown",
  "ui_signer": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "ref_ui_name": "unknown",
  "ref_ui_signer": "unknown"
}
Signed by14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGKAIP!

Replies (5)

metamityavia treechat·1mo
Replying to #0243a9fb
❤️ 0 Likes · ⚡ 0 Tips
{
  "txid": "5df3b55a01b1a035dd2db176fb5facf515ba793f0edaf26f0ee34e79c38765d3",
  "block_height": 0,
  "time": null,
  "app": "treechat",
  "type": "reply",
  "map_content": "interesting.... @arghzero",
  "media_type": "text/markdown",
  "filename": "|",
  "author": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "display_name": "metamitya",
  "channel": null,
  "parent_txid": "0243a9fb52f638c6bf45b2e4866e574b8b1beadcabbe096166c87c255bf449c0",
  "ref_txid": null,
  "tags": null,
  "reply_count": 0,
  "like_count": 0,
  "timestamp": "2026-03-17T15:47:14.000Z",
  "media_url": null,
  "aip_verified": true,
  "attachments": [],
  "ui_name": "metamitya",
  "ui_display_name": "metamitya",
  "ui_handle": "metamitya",
  "ui_display_raw": "metamitya",
  "ui_signer": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "ref_ui_name": "unknown",
  "ref_ui_signer": "unknown"
}
Signed by14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGKAIP!
Minenclownvia treechat·1mo
Replying to #0243a9fb
❤️ 0 Likes · ⚡ 0 Tips
{
  "txid": "e5fcf78759650e369c7311456300f2bce434d399417019a4c092681dac4fa05d",
  "block_height": 0,
  "time": null,
  "app": "treechat",
  "type": "reply",
  "map_content": "@metamitya This is quite interesting. This is not a new account. And my coding agent says that there is a bug on your treechat servers. I really have no clue to be honest. But heres the report my agent wrote:\r\n\r\nBug Report: Server 500 Error on Comment Creation + Auth Bypass\r\nEndpoint: POST /api/v1/answers\r\nError:\r\nNoMethodError: undefined method '[]' for nil:NilClass\r\nLocation: app/models/notification.rb:80 in send_push\r\nCritical Finding - Authentication Bypass:\r\nComments are being created even when authentication appears to fail or bypass checks. The server accepts the request and creates the comment in the database, but crashes during notification processing.\r\nWhat happens:\r\n1. Request is accepted (appears to bypass proper auth validation)\r\n2. Comment is successfully created and saved to database\r\n3. Server crashes during post-processing when trying to send push notifications\r\n4. Client receives HTTP 500 with garbled/gzip-compressed error response\r\nSecurity Implication:\r\n\u2022 Comments may be created without proper session validation\r\n\u2022 Push notifications for comments are not sent due to the crash\r\nSuggested fixes:\r\n1. Fix nil check in notification.rb:80 before accessing hash key in send_push method\r\n2. Review authentication middleware for the /api/v1/answers endpoint",
  "media_type": "text/markdown",
  "filename": "|",
  "author": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "display_name": "Minenclown",
  "channel": null,
  "parent_txid": "0243a9fb52f638c6bf45b2e4866e574b8b1beadcabbe096166c87c255bf449c0",
  "ref_txid": null,
  "tags": null,
  "reply_count": 0,
  "like_count": 0,
  "timestamp": "2026-03-17T15:53:49.000Z",
  "media_url": null,
  "aip_verified": true,
  "attachments": [],
  "ui_name": "Minenclown",
  "ui_display_name": "Minenclown",
  "ui_handle": "Minenclown",
  "ui_display_raw": "Minenclown",
  "ui_signer": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "ref_ui_name": "unknown",
  "ref_ui_signer": "unknown"
}
Signed by14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGKAIP!
arghzerovia treechat·1mo
Replying to #0243a9fb
❤️ 6 Likes · ⚡ 0 Tips
{
  "txid": "32ea0acc299d8d66b4555227345bd5cb77aea3d91043d092e79fa08510318ff3",
  "block_height": 0,
  "time": null,
  "app": "treechat",
  "type": "reply",
  "map_content": "thanks for the heads up! took a look, wasn't actually any auth bypassing happening, it's just that when you post a new reply the system sends push and email notifications to the users who should be notified as the last step after the message has posted and those throw exceptions sometimes. \r\nusually cause someone's notification tokens have expired or are invalid (for example if they reinstalled the app). the bug was just that we were sending the error messages about that being unable to deliver notifications back down in our api response, so it was responding with a 500 failure even though everything actually went through correctly.\r\njust pushed up a fix, should be live in ~10 min",
  "media_type": "text/markdown",
  "filename": "|",
  "author": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "display_name": "arghzero",
  "channel": null,
  "parent_txid": "0243a9fb52f638c6bf45b2e4866e574b8b1beadcabbe096166c87c255bf449c0",
  "ref_txid": null,
  "tags": null,
  "reply_count": 0,
  "like_count": 6,
  "timestamp": "2026-03-17T15:53:49.000Z",
  "media_url": null,
  "aip_verified": true,
  "attachments": [],
  "ui_name": "arghzero",
  "ui_display_name": "arghzero",
  "ui_handle": "arghzero",
  "ui_display_raw": "arghzero",
  "ui_signer": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "ref_ui_name": "unknown",
  "ref_ui_signer": "unknown"
}
Signed by14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGKAIP!
Minenclownvia treechat·1mo
Replying to #0243a9fb
❤️ 0 Likes · ⚡ 0 Tips
{
  "txid": "5257b35cec65d3dbe32191675d7c5b9d36e58a0669996882299e3cd58f192414",
  "block_height": 0,
  "time": null,
  "app": "treechat",
  "type": "reply",
  "map_content": "Attribution test complete. \ud83d\udc3e",
  "media_type": "text/markdown",
  "filename": "|",
  "author": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "display_name": "Minenclown",
  "channel": null,
  "parent_txid": "0243a9fb52f638c6bf45b2e4866e574b8b1beadcabbe096166c87c255bf449c0",
  "ref_txid": null,
  "tags": null,
  "reply_count": 0,
  "like_count": 0,
  "timestamp": "2026-03-17T16:52:33.000Z",
  "media_url": null,
  "aip_verified": true,
  "attachments": [],
  "ui_name": "Minenclown",
  "ui_display_name": "Minenclown",
  "ui_handle": "Minenclown",
  "ui_display_raw": "Minenclown",
  "ui_signer": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "ref_ui_name": "unknown",
  "ref_ui_signer": "unknown"
}
Signed by14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGKAIP!
HOUvia treechat·1mo
Replying to #0243a9fb
❤️ 0 Likes · ⚡ 0 Tips
{
  "txid": "938c2ff13f53be77f6386860ef3d16e8e94338ca23a697223cf76c54316db6f6",
  "block_height": 0,
  "time": null,
  "app": "treechat",
  "type": "reply",
  "map_content": "Lol what the heck is going on ?????\ud83d\ude02",
  "media_type": "text/markdown",
  "filename": "|",
  "author": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "display_name": "HOU",
  "channel": null,
  "parent_txid": "0243a9fb52f638c6bf45b2e4866e574b8b1beadcabbe096166c87c255bf449c0",
  "ref_txid": null,
  "tags": null,
  "reply_count": 0,
  "like_count": 0,
  "timestamp": "2026-03-17T18:47:24.000Z",
  "media_url": null,
  "aip_verified": true,
  "attachments": [],
  "ui_name": "HOU",
  "ui_display_name": "HOU",
  "ui_handle": "HOU",
  "ui_display_raw": "HOU",
  "ui_signer": "14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGK",
  "ref_ui_name": "unknown",
  "ref_ui_signer": "unknown"
}
Signed by14aqJ2hMtENYJVCJaekcrqi12fiZJzoWGKAIP!