StarkWare's ecological director wrote on the X platform that there are security issues with Fractal Bitcoin.
1. RPC credentials are hardcoding and cannot be configured through environment variables, and the RPC server is publicly exposed and vulnerable to attack.
2. Allowing RPC connections from any IP address is also very dangerous, exposing users' nodes to potential attacks from anywhere.
3. Some settings that allow ZeroMQ connections from any IP pose a security risk; removing the limit on the number of connections may result in resource exhaustion.
4. The official GitHub organization or repository is difficult to identify, etc.
StarkWare Eco-Head Alerts Fractal of Security Issues
2024-09-11 14:41:55
Starkware ecology supervisor platform posting fractal bitcoin existencedesk3cryptocurrencydesktopCrypto News
Disclaimer:
1. The information provided does not constitute investment advice. Investors should make independent decisions and bear all risks themselves.
2. The copyright of this content belongs to the original author. The views expressed herein are solely those of the author and do not represent the stance or position of this website.
