
nadim@infosec.exchange ("Nadim Kobeissi") wrote:
4/ Nym’s gateway credential verification skipped serial number checks, meaning eCash tickets could be used multiple times—leading to double-spend attacks. We recommended ensuring strict checks across all verification paths.