logo

Database

Bitfinex Secret Key

Description

The source code repository contains sensitive information: Bitfinex Secret Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Bitfinex Secret Key patterns in source code and configuration files

Vulnerable code example

BFX_API_SECRET=cOtvatgo7EKbU3dkOXc1q0dAClBOzLAzQsL2KHfk53z
export BITFINEX_API_SECRET="3QDu6eC8hdSasgVn6Gy6sP09mSqElwOB8BzqwTm-Xjm"
exchange = ccxt.bitfinex({
    'apiKey': 'xmuCpqX10UjDFMf5i0zbyu5R-pkrg7_0OFnWKSjqHwN',
    'secret': 'cOtvatgo7EKbU3dkOXc1q0dAClBOzLAzQsL2KHfk53z',
})
const { RESTv2 } = require('bfx-api-node-rest')
const rest = new RESTv2({ apiKey: 'xmuCpqX10UjDFMf5i0zbyu5R-pkrg7_0OFnWKSjqHwN', apiSecret: '3QDu6eC8hdSasgVn6Gy6sP09mSqElwOB8BzqwTm-Xjm', transform: true })