StarkWare Ecosystem Director: Fractal Bitcoin may have security issues
ChainCatcher news, the head of the StarkWare ecosystem posted on the X platform stating that Fractal Bitcoin may have security issues.
- RPC credentials are hard-coded and cannot be configured via environment variables, and the RPC server is openly exposed and vulnerable to attacks;
- Allowing RPC connections from any IP address is also very dangerous, exposing users' nodes to potential attacks from anywhere;
- Certain settings allowing ZeroMQ connections from any IP pose security risks; removing connection limits may lead to resource exhaustion;
- Official GitHub organizations or repositories are difficult to identify, etc.
Предупреждение о рисках Предупреждение о рисках
Связанные теги
