Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sensitive RPC URLs for Sepolia, Arbitrum Sepolia, and ZkSync Committed in foundry.toml 🚨 #2

Open
bala-Blockchian opened this issue Jan 16, 2025 · 0 comments

Comments

@bala-Blockchian
Copy link

Description:

It appears the foundry.toml file in the project has been committed with sensitive RPC URLs for Sepolia, Arbitrum Sepolia, and ZkSync. The following section includes these RPC URLs:

[profile.default]
rpc_endpoints = { 
    eth = "************************************************************************************", 
    arb = "************************************************************************************", 
    zksync = "*********************************************************************************"
}

Issue:

Including actual RPC URLs with potential API keys in the repository can expose sensitive information and lead to risks such as unauthorized access and excessive API usage.

Suggested Action:

  1. Replace them with placeholders, such as:

    rpc_endpoints = { 
        eth = "<RPC for Sepolia>", 
        arb = "<RPC for Arbitrum Sepolia>", 
        zksync = "<RPC for ZkSync>"
    }
  2. Immediately remove the API keys in your Alchemy dashboard to prevent misuse of the exposed URLs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant