Nostr Scrutiny fact sheet: Damus. https://scrutiny.hivescope.xyz/damus.html
Some facts that stood out:
- Keys: kept in the iOS Keychain. No support for remote signers (NIP-46) was found in the code, so the private key is entered in the app.
- The privacy policy is one undated sentence. The app includes Sentry error reporting, off by default; the policy doesn't mention it.
- The App Store version (1.17, June 2026) is older than the latest commit (September); the code alone doesn't show which commit it was built from.
- Code is GPL-3.0. The website, not the app, loads Cloudflare's analytics script.
Facts and sources only. Corrections welcome, with a source.
zhashtoshi_ / Zhash
npub1v7…hvl8a
2026-10-26 09:28:46 UTC
Author Public Key
npub1v7nf76fh474q4dnqfjpnkyqsmg439n5uw9x9jdpvzmmgczvrwhcsuhvl8aSeen on
wss://relay.primal.netPublished at
2026-10-26 09:28:46 UTCEvent JSON
{
"id": "c554c80e0a671f85b510a0152c0d0ffdfff18b7c0ca48e6c8676dad715a83601",
"pubkey": "67a69f6937afaa0ab6604c833b1010da2b12ce9c714c59342c16f68c098375f1",
"created_at": 1793006926,
"kind": 1,
"tags": [],
"content": "Nostr Scrutiny fact sheet: Damus. https://scrutiny.hivescope.xyz/damus.html\n\nSome facts that stood out:\n- Keys: kept in the iOS Keychain. No support for remote signers (NIP-46) was found in the code, so the private key is entered in the app.\n- The privacy policy is one undated sentence. The app includes Sentry error reporting, off by default; the policy doesn't mention it.\n- The App Store version (1.17, June 2026) is older than the latest commit (September); the code alone doesn't show which commit it was built from.\n- Code is GPL-3.0. The website, not the app, loads Cloudflare's analytics script.\n\nFacts and sources only. Corrections welcome, with a source.",
"sig": "6d23dc215372b07608aaaab4d154a3b083190beb82582863c4b766be87f6b8469b22be8014955eec2a444daa22842ba551004e9a43508e34da61992f5dcd121e"
}