helmet is good to use but it looks like this is not being used here?

did you mean https://www.npmjs.com/package/cors?

lol have not seen the "just use all the utxos" approach before, but makes sense in a faucet context. mb worth a comment explaining but no blocker.

false is the default param here, so could omit it.

here's how this appears in the logs

Successfully sent 10000 tXEC to ectest:qrg8vx3ry86dsrjzs8tck63mmscgsc3xyssryr9t2c: [object Object]

The problem is that the response from chronik is not txid directly, as expected on line 231 here; txid is a key in the object returned by chronik.broadcast...

so -- prob change txid on line 231 to response, then txid here to response.txid

may not need to return here

I return in token server bc I use the app for other things.

This is a super simple app, but you may still want to model that approach -- if only to make sure processes are cleaned up properly.

e.g. check token-server's index.js for

// Gracefully shut down on app termination
        process.on('SIGTERM', () => {
            // kill <pid> from terminal
            server.close();
            console.log('token-server shut down by SIGTERM');
            // Shut down the telegram bot
            telegramBot.stopPolling();
            process.exit(0);
        });

        process.on('SIGINT', () => {
            // ctrl + c in nodejs
            server.close();
            console.log('token-server shut down by ctrl+c');
            // Shut down the telegram bot
            telegramBot.stopPolling();
            process.exit(0);
        });

tho, the way this app is set up, ctrl+c does kill the process for me. so, mb not necessary.

I removed it because it's not needed here, but forgot the comment

lol have not seen the "just use all the utxos" approach before, but makes sense in a faucet context. mb worth a comment explaining but no blocker.

I looked at how it's done in the token server and this makes more sense for a simple faucet

Indeed, and it should be true XD there is no token involved here

Good catch

That was also my idea, there is nothing to clean up here

yes it's something we want, otherwise you can DoS the faucet by sending some tokens to the wallet address