StarkWare Ecosystem Director: Fractal Bitcoin may have security issues

Sep 11, 2024 22:57:57

Share to

ChainCatcher news, the head of the StarkWare ecosystem posted on the X platform stating that Fractal Bitcoin may have security issues.

RPC credentials are hard-coded and cannot be configured via environment variables, and the RPC server is openly exposed and vulnerable to attacks;
Allowing RPC connections from any IP address is also very dangerous, exposing users' nodes to potential attacks from anywhere;
Certain settings allowing ZeroMQ connections from any IP pose security risks; removing connection limits may lead to resource exhaustion;
Official GitHub organizations or repositories are difficult to identify, etc.