安全审计实测：MiniMax M3.1 是唯一发现更高危漏洞的模型
CashuPayServer 用多个模型跑安全审计，MiniMax M3.1（即 Space Bunny）是唯一找出此前所有扫描都漏掉的高危 bug 的模型，作者建议趁 OpenCode 免费期跑安全关键代码。
CashuPayServer v0.5.6-alpha is out, and it's the most thoroughly reviewed release yet. Three independent security audits went through CashuPayServer and its Cashu wallet library line by line. This release fixes what they found. If you take bitcoin payments with CashuPayServer, please upgrade, although no bug was remotely exploitable or critical. What's new: - Payment requests work with any standard Cashu wallet. Show a QR code, the customer pays, and the page turns to "Paid ✓" the moment the money arrives. Newer wallets also get the compact creqB format, a smaller QR code that's easier to scan. - Payments and withdrawals are much harder to break in extreme conditions. - Safer data out of the box. If your wallet database could be downloaded from the web, the dashboard tells you, and a new install can move its data to a safe place with one click. Upgrading takes a couple of minutes, and there's nothing to configure: - Standalone: upload the new files over the old ones, keeping your data folder. - WordPress: upload the plugin and choose "Replace current with uploaded". The database updates itself on your first visit. Cheap PHP hosting, no node to run, bitcoin payments in your shop. About the audits: We have always run Ai audits with all the models available. This round brings DeepSeek 4.1 Flash 1017, Opus 5.5 and MiniMax M3.1 (also known as Space Bunny). All of them found real bugs previous audits/models did not find. And we have run the heavyweights on CashuPayServer before. MiniMax M3.1 was the only one that found a higher severity bug, which all previous scans missed. Since it is free on OpenCode for a few days, run your security-critical code through it. 👉 Download: https://github.com/jooray/cashupayserver/releases/tag/v0.5.6-alpha