logo

Database

Kraken Private Key

Description

The source code repository contains sensitive information: Kraken Private Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Kraken Private Key patterns in source code and configuration files

Vulnerable code example

KRAKEN_API_SECRET=gdZ0Vo6IYnrVBCgmc6zD15sA51FJuFs4Tq4hmhM2g8BM4JSP9i7+28e3VC9i4+bFO6bScj6ycgSO6fW3u+7Wbg==
export KRAKEN_PRIVATE_KEY="WUpZvd5GlVm4xxkpD/htqU7fRN7QLuvcOXYZOTAdL5+5TGHZ+gkEZIksIh/Z6WFjPQmVWd/tA7A6Xud0a04Yaw=="
exchange = ccxt.kraken({
    'apiKey': '7rfyCG3RMhgGhr6pxcG8eLAwWtpJ4pORywR42IPoY4HSVfQwRtz15NDr',
    'secret': 'gdZ0Vo6IYnrVBCgmc6zD15sA51FJuFs4Tq4hmhM2g8BM4JSP9i7+28e3VC9i4+bFO6bScj6ycgSO6fW3u+7Wbg==',
})
k = krakenex.API(key='7rfyCG3RMhgGhr6pxcG8eLAwWtpJ4pORywR42IPoY4HSVfQwRtz15NDr', secret='WUpZvd5GlVm4xxkpD/htqU7fRN7QLuvcOXYZOTAdL5+5TGHZ+gkEZIksIh/Z6WFjPQmVWd/tA7A6Xud0a04Yaw==')
kraken_api_secret: "gdZ0Vo6IYnrVBCgmc6zD15sA51FJuFs4Tq4hmhM2g8BM4JSP9i7+28e3VC9i4+bFO6bScj6ycgSO6fW3u+7Wbg=="