• Web3 developer Brian Guan lost $40,000 after accidentally posting his wallet’s secret keys publicly on GitHub, with the funds being drained in just two minutes.
  • The crypto community’s reactions were mixed, with some offering support and others mocking Guan’s previous comments about developers using AI tools like ChatGPT for coding.
  • This incident highlights ongoing debates about security practices and the role of AI in software development within the crypto community.
  • lowleveldata@programming.dev
    link
    fedilink
    English
    arrow-up
    50
    ·
    2 years ago

    It must be automated for it to happen in 2 minutes. Which implies these kind of things happen often enough for someone to write a script for it.

    • partial_accumen@lemmy.world
      link
      fedilink
      English
      arrow-up
      34
      ·
      edit-2
      2 years ago

      If it was a script I wrote, it would have successfully stolen the $40k, but also stolen my own money and deposit both sets of money into a second intended victims account because I forgot to clear a variable before the main loop runs again.

    • TheHarpyEagle@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      ·
      2 years ago

      Oh yes absolutely, there are bots constantly crawling any open source code. A friend of mine accidentally leaked their discord API key, nuked a whole server within minutes.

    • nucleative@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      2 years ago

      There must be bots trolling GitHub for API keys, crypto secret keys, and other such valuable data