Read

Binance’s source code has been openly accessible on a GitHub repository for months, with the exchange asserting that the leak posed only a ‘negligible risk.’ 
Journalists at 404 Media <a href="https://www.404media.co/binance-internal-code-and-passwords-exposed-on-github-for-months/" target="_blank" rel="noreferrer noopener">discovered</a> what they say is a “highly sensitive cache of code, infrastructure diagrams, internal passwords,” and other technical information related to <a href="https://crypto.news/tag/binance/" target="_blank" rel="noreferrer noopener">Binance</a>, openly available on a GitHub repository for several months. 
According to the report, the repository included a folder labeled ‘binance-infra-2.0’ with a diagram illustrating the interconnections among various components of Binance’s dependencies. Additionally, it contained numerous scripts and code, some of which appeared related to Binance’s implementation of passwords and multifactor authentication, with comments in both English and Chinese, as noted by 404 Media. 
<figure class="wp-block-image size-full">
 <img loading="lazy" decoding="async" width="1282" height="332" src="https://crypto.news/app/uploads/2024/02/shdifughdf.png" alt="GitHub repository exposed Binance's internal passwords and code - 19" class="wp-image-14244156">
 <figcaption class="wp-element-caption">
 Leaked data redacted by 404 Media | Source: 404 Media
 </figcaption>
</figure> 
 You might also like: <a href="https://crypto.news/binance-labs-distances-from-skyark-chronicles-latest-funding-round/"> Binance Labs distances from SkyArk Chronicles’ latest funding round </a> 
While a spokesperson for Binance confirmed the leak, noting that the information “posed a negligible risk to the security of our users, their assets or our platform,” the description of the takedown request showed a slightly different picture, saying that the code “poses a significant risk to Binancec. and causes severe financial harm to Binance and user’s confusion/harm.” 
The spokesperson also added that the code “does not resemble what we currently have in production.” 
As per the report, the leak contained passwords for systems marked as “prod,” indicating production systems rather than demo or development environments. Additionally, at least two of these passwords corresponded to Amazon Web Services’ servers used by Binance, the report says. However, it is unclear if a third party distributed the code maliciously or if a Binance employee accidentally uploaded it to GitHub. 
 Read more: <a href="https://crypto.news/binance-to-allow-traders-to-store-their-assets-on-external-banks/"> Binance to allow traders to store their assets on external banks </a>

GitHub repository exposed Binance’s internal passwords and code

crypto.news

Other articles published on Feb 1, 2024

Bitcoin: Checking the demand for BTC as price remains stuck near $43k

Binance Inscriptions Marketplace Debuts on Bitcoin Blockchain

Litecoin Maintains Its Horizontal Trend, But Remains Above $60

Cardano: Are NFTs the catalyst ADA needs now

Breaking: ARKInvest Sees Massive Potential in #Bitcoin

Bitcoin mentioned as financial powerhouse in ARK Invest’s 2024 market forecast

Join our free newsletter for daily crypto updates!