diff --git a/packages/ditto/middleware/swapNutzapsMiddleware.ts b/packages/ditto/middleware/swapNutzapsMiddleware.ts
index 76d34049..b49e3aa4 100644
--- a/packages/ditto/middleware/swapNutzapsMiddleware.ts
+++ b/packages/ditto/middleware/swapNutzapsMiddleware.ts
@@ -57,7 +57,7 @@ export const swapNutzapsMiddleware: MiddlewareHandler<
 
     let contentTags: string[][];
     try {
-      contentTags = JSON.parse(decryptedContent); // TODO: use zod
+      contentTags = z.string().array().array().parse(decryptedContent);
     } catch {
       return c.json({ error: 'Could not JSON parse the decrypted wallet content.' }, 400);
     }