AIKIDO-2026-431362

TL;DR

The NIP-50 event-matching path searches event content using a sliding window sized from the search string length. An empty search string produces a zero-sized window, which always panics instead of returning a result. A remote client that can submit filters, including clients querying an SDK local relay, can trigger the panic with an empty search value and terminate request processing, a worker, or the whole process. The fix handles empty searches before the substring search so the matcher returns a defined result without panicking.