Private KEY of crypto wallet
None
S
Sifchain
Submitted None
Actions:
Reported by
krynos
Vulnerability Details
Technical details and impact analysis
## Summary:
Hello,
I'm writing in order to inform you that in your source code is stored the Private key of your crypto wallet that contains some money, as EOS, FNDR, and more.
Your wallet address is this:
0x627306090abaB3A6e1400e9345bC60c78a8BEf57
## Steps To Reproduce:
The key is stored in "those files" and is:
./.github/workflows/node.yml
./test/integration/.env.ciExample
./test/integration/start-integration-env.sh
./smart-contracts/.env.example
./smart-contracts/Deployment.md
./smart-contracts/.env.ui.example
./ui/core/src/test/utils/accounts.ts
and is this:
ETHEREUM_PRIVATE_KEY="c87509a1c067bbde78beb793e6fa76530b6382a4c0241e5e4a9ec0a0f44dc0d3"
## Supporting Material/References:
I've attached a screenshot of your wallet where you can show some amounts of EOS and other money.
Your can access on it using the site https://www.myetherwallet.com
## Impact
Github code expose the private key of your wallet 0x627306090abaB3A6e1400e9345bC60c78a8BEf57
Report Details
Additional information and metadata
State
Closed
Substate
Duplicate
Submitted
Weakness
Use of Hard-coded Password