A blockchain developer posted on Twitter that he had lost almost $50,000 after his cryptocurrency wallet was drained. He explained that he had been working on a software project on Github in a private repository that contained his <button class="define-target" id="wallet">wallet's</button> <button class="define-target" id="private-key">private key</button>. In order to apply for a funding grant from the Optimism project, he had to make the repository public. However, he forgot that the secret key was in the repository.<p>Generally, it is very bad practice to store sensitive secrets in Github, even when projects are set to private.</p><p>"Got drained of everything," he wrote on Twitter. A commenter asked how long it took for the attacker to steal the money after the private key became publicly visible. "2 min", he replied.</p>

Archived tweet

Tweet by br1an.eth:

Tweet #1

Image #1: