Sifchain: mongodb credentials leaked in github

Steps To Reproduce: add details for how we can reproduce the issue 1. Go to values.yaml file file. 2.Check from line 23: blockExplorer: args: mongoUsername: "mongodb" mongoPassword: mongoDatabase: "blockexplorer" env: rootURL: "http://localhost:3000" chainnet: "" genesisURL: "" remote: rpcURL: ""...

Sifchain: RSA PRIVATE KEY discloser

hi, https://github.com/Sifchain/sifnode/blob/4fb7523322f74e70600a10fff4dbdd42425c077f/ui/.vagrant/machines/default/virtualbox/privatekey disclosing RSA PRIVATE KEY. Impact might give access to sensitive data protected with this key...

Sifchain: Private eth key found

Hello, team! Found private ethereum key at file: https://github.com/Sifchain/sifnode/blob/develop/smart-contracts/.env.example This key points to wallet balance: F1284232 As I understood, private key allows to spend this coins, so it may need to be masked or hidden. Impact eth private key disclos...

Sifchain: Exposed Openapi Token

Summary While looking for secrets, I noticed that Developers had removed a swagger spec draft. The URL had a committed token in the history of multiple project files: ui/core/src/api/transactionsService.ts ui/core/src/api/tendermintService.ts ui/core/src/api/stakingService.ts...