Read

<div class="cryptonews">
 <p class="is-style-lead">Binance’s source code has been openly accessible on a GitHub repository for months, with the exchange asserting that the leak posed only a ‘negligible risk.’</p>
 <p>Journalists at 404 Media discovered what they say is a “highly sensitive cache of code, infrastructure diagrams, <a rel="noopener noreferrer nofollow" title="internal" href="https://thebittimes.com/tag/internal.html">internal</a> <a rel="noopener noreferrer nofollow" title="passwords" href="https://thebittimes.com/tag/passwords.html">passwords</a>,” and other technical information related to Binance, openly available on a GitHub <a rel="noopener noreferrer nofollow" title="repository" href="https://thebittimes.com/tag/repository.html">repository</a> for several months.</p>
 <p>According to the report, the repository included a folder labeled ‘binance-infra-2.0’ with a diagram illustrating the interconnections among various components of Binance’s dependencies. Additionally, it contained numerous scripts and code, some of which appeared related to Binance’s implementation of passwords and multifactor authentication, with comments in both English and Chinese, as noted by 404 Media.</p>
 <figure class="wp-block-image size-full"><picture decoding="async" class="wp-image-14244156">
   <source type="image/webp" srcset="https://cdn.thebittimes.com/images/2024/02/01/16c5e717d98573b75a7fffa417fff0ac.webp.webp">
   <img decoding="async" width="1282" height="332" src="https://cdn.thebittimes.com/images/2024/02/01/16c5e717d98573b75a7fffa417fff0ac.webp" alt="GitHub repository exposed Binance's internal passwords and code - 1"> 
  </picture>
  <figcaption class="wp-element-caption">
   Leaked data redacted by 404 Media | Source: 404 Media
  </figcaption>
 </figure>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> <a rel="noopener noreferrer nofollow" title="
Binance " href="https://thebittimes.com/tag/binance.html"> Binance </a>Labs distances from SkyArk Chronicles’ latest funding round
 </div>
 <p>While a spokesperson for Binance confirmed the leak, noting that the information “<a rel="noopener noreferrer nofollow" title="posed" href="https://thebittimes.com/tag/posed.html">posed</a> a negligible risk to the security of our users, their assets or our platform,” the description of the takedown request showed a slightly different picture, saying that the code “poses a significant risk to Binancec. and causes severe financial harm to Binance and user’s confusion/harm.”</p>
 <p>The spokesperson also added that the code “does not resemble what we currently have in production.”</p>
 <p>As per the report, the leak contained passwords for systems marked as “prod,” indicating production systems rather than demo or development environments. Additionally, at least two of these passwords corresponded to Amazon Web Services’ servers used by Binance, the report says. However, it is unclear if a third party distributed the code maliciously or if a Binance employee accidentally uploaded it to GitHub.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Binance to allow traders to store their assets on external banks
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/github-repository-exposed-binance-s-internal-passwords-and-code-tbt78476.html">https://thebittimes.com/github-repository-exposed-binance-s-internal-passwords-and-code-tbt78476.html</a></p>

GitHub repository exposed Binance’s internal passwords and code

TheBitTimes

Other articles published on Feb 1, 2024

Elizabeth Warren Reignites Battle Against Crypto’s Illicit Use

Ithaca Finance raises $2.5m to build on-chain options protocol

Powel: The Fed no longer plans to lower interest rates – The S&P 500 loses $500 billion!

ACLU Supports Wrongful Imprisonment Lawsuit Over Facial Recognition Error

3 Tokens Below $0.5 Ready to Take on Solana (SOL)

Tether Records $2.85B Profit in Q4 2023, $6.2B Across the Year

Join our free newsletter for daily crypto updates!