Crypto exchange Binance has refuted a report claiming a “highly sensitive” cache of internal passwords and code had been exposed on GitHub for months — arguing the code was outdated and posed a “negligible risk.”
<a href="https://www.404media.co/binance-internal-code-and-passwords-exposed-on-github-for-months/" target="_blank" rel="noopener nofollow">According</a> to a Jan. 31 report from 404 Media, there was a cache of “code, infrastructure diagrams, internal passwords, and other technical information,” including information about how the exchange carries out passwords and <a href="https://cointelegraph.com/news/sec-twitter-account-hacked-2fa-x-reveals">multifactor authentication</a>.
The report notes that Binance successfully petitioned GitHub to scrub the files through a Jan. 24 copyright takedown <a href="https://github.com/github/dmca/blob/master/2024/01/2024-01-24-binance.md?ref=404media.co" target="_blank" rel="noopener nofollow">request</a>, where the exchange said the information “poses [a] significant risk” and was posted “without authorization.”
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-02/78154d51-5d40-48b4-adb0-bbae22dc478e.png" alt="" title="">
 <figcaption style="text-align: center;">
 A redacted screenshot of the information formerly available on GitHub. Source: 404 Media
 </figcaption>
</figure>
However, a Binance spokesperson told Cointelegraph that the individual “shared very outdated information on GitHub” and that their security team confirmed the cache did not “resemble what we currently have in production.” 
The information “posed negligible risk to the security of our users, their assets or our platform,” Binance added. It claimed the information was so outdated “it would be unusable by any third parties or malicious actors.”
Related: <a href="https://cointelegraph.com/news/hamas-terror-victims-allege-binance-provided-assistance-terrorist-lawsuit">Hamas victims sue Binance over alleged ‘assistance’ to terrorists</a>
Binance said it would protect its past or present <a href="https://cointelegraph.com/news/anthropic-pledges-no-client-data-for-ai-training">intellectual property</a> and aim to alleviate harm from “unnecessary confusion or unwarranted fears about the publication of private data,” hence why it issued a takedown request with GitHub and is pursuing legal action against the user.
However, Binance’s request with GitHub claims multiple times that the information is “our client’s internal code, which poses a significant risk to Binance. and causes severe financial harm to Binance and user’s confusion/harm.”
Binance did not respond to further questions on the matter.
Magazine: <a href="https://cointelegraph.com/magazine/defis-billion-dollar-secret-the-insiders-responsible-for-hacks/">DeFi’s billion-dollar secret: The insiders responsible for hacks</a>

Binance claims code leak on GitHub is ‘outdated,’ poses minor risk

Cointelegraph

2024년 2월 1일에 게재된 다른 기사

Coast Guard’s C5ISC Forges Ahead in Technology Advancements

Best Crypto to Buy Now Feb 1 – Chainlink, Pyth, Mina

US Banking Crisis Might Be Here Again, Can Bitcoin (BTC) Save the Day?

Bitcoin Experiences Volatility Amid Spot ETF Talks and Upcoming Halving

Ethereum’s network activity sees a turnaround – Here’s how

FTX Restructuring Plan Did Not Aim to ‘Reboot’ the Firm- Attorney

무료 뉴스레터에 가입하여 매일 최신 암호화폐 소식을 받아보세요!