pull down to refresh
If so, this means that still anyone could pull X*N sats in total. Like this the implementation doesn't seem to be usable in the real world yet. There would have to be some security mechanism in place to make a payment link non-reusable.
Even entering some sort of PIN doesn't seem to be a fitting solution as this PIN — once entered into a POS terminal — could then be used with the respective LNURL-withdraw link to pull funds as one pleases.
If someone more knowledgeable could clear up any mistakes I made in my reasoning, I'd really appreciate it.
Any ideas yet on how to overcome these issues?
reply
There's a maxWithdrawable value, so I'm guessing the card can be configured to be used X times and up to N sats per transaction.
I think. I pretty much only know LN in general, and am not very familiar with LNURL specifically,
Maybe someone else seeing this and knows the answer can pipe in.