logo

Database

Etherscan Api Key

Description

The source code repository contains sensitive information: Etherscan API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Etherscan API Key patterns in source code and configuration files

Vulnerable code example

ETHERSCAN_API_KEY=PEJJ0AF9G0GNQRMTNSLV6UZJ95E0CPNXRQ
curl "https://api.etherscan.io/v2/api?chainid=1&module=account&action=balance&address=0x0&apikey=3D1BCAMZIKF72RAUHOJVJ6CQJVFLGBPZWB"
etherscan: {
    apiKey: "PEJJ0AF9G0GNQRMTNSLV6UZJ95E0CPNXRQ",
  },
etherscan: {
    apiKey: {
      mainnet: "3D1BCAMZIKF72RAUHOJVJ6CQJVFLGBPZWB",...