diff --git a/README.md b/README.md
index ee195af..5bbee22 100644
--- a/README.md
+++ b/README.md
@@ -17,15 +17,15 @@ Blossom Servers expose four endpoints for managing blobs
 - `GET /<sha256>` (optional file `.ext`) [BUD-01](./buds/01.md#get-sha256---get-blob)
 - `HEAD /<sha256>` (optional file `.ext`) [BUD-01](./buds/01.md#head-sha256---has-blob)
 - `PUT /upload` [BUD-2](./buds/02.md#put-upload---upload-blob)
-  - `Authentication`: Signed [nostr event](./buds/01.md#upload-authorization-required)
+  - `Authentication`: Signed [nostr event](./buds/02.md#upload-authorization-required)
   - Return a blob descriptor
 - `GET /list/<pubkey>` [BUD-02](./buds/02.md#get-listpubkey---list-blobs)
   - Returns an array of blob descriptors
-  - `Authentication` _(optional)_: Signed [nostr event](./buds/01.md#list-authorization-optional)
-- `DELETE /<sha256>` [BUD-2](./buds/02.md#delete-sha256---delete-blob)
-  - `Authentication`: Signed [nostr event](./buds/01.md#delete-authorization-required)
+  - `Authentication` _(optional)_: Signed [nostr event](./buds/02.md#list-authorization-optional)
+- `DELETE /<sha256>` [BUD-02](./buds/02.md#delete-sha256---delete-blob)
+  - `Authentication`: Signed [nostr event](./buds/02.md#delete-authorization-required)
 - `PUT /mirror` [BUD-04](./buds/04.md#put-mirror---mirror-blob)
-  - `Authentication`: Signed [nostr event](./buds/01.md#upload-authorization-required)
+  - `Authentication`: Signed [nostr event](./buds/02.md#upload-authorization-required)
 
 ## Protocol specification (BUDs)