Sifchain · Report #1283605

ETHEREUM_PRIVATE_KEY leaked via github

N/Astatus

1upvotes

9 Dec 2021disclosed

How it was found

ETHEREUM_PRIVATE_KEY

It is used to sign Ethereum transactions on the Blockchain.

Steps To Reproduce:

Open this url https://github.com/Sifchain/sifnode/blob/f96727748e1f44926d3bd72b1021f6c2461dee17/test/integration/start-integration-env.sh

POC - screenshot attached

Impact

It shouldn’t be publicly shared because whoever owns the Private keys can access the funds for that address. -Private keys are used to create Public addresses using SHA256 hash function.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original