Passwords And Other Sensitive Binance Data Leaked On GitHub

A set of sensitive material linked to the cryptocurrency exchange Binance, comprising code and internal passwords, was allegedly disclosed on GitHub, where it remained accessible to the public for several months.

As per 404 Media, the shared content by the account named Termf encompassed code, infrastructure diagrams, internal passwords, and other technical details. Some of the code available on the platform was purportedly associated with various security measures which have been implemented by the exchange, encompassing passwords and multi-factor authentication (MFA).

Binance Takes Action

The disclosed data also supposedly included passwords for systems labeled as prod, likely indicating their use on the live site rather than in development or demonstration environments. The leaked information on GitHub was reportedly taken down following a copyright request by Binance last week, validating that the content contained code owned by the exchange.

Perhaps most alarming though, the leaked material had been accessible for viewing since at least January 5th, when 404 Media notified the biggest cryptocurrency exchange in the world about what happened.

Damage Control

In its copyright takedown request, Binance asserted that the leaked internal code poses significant risk to Binance and causes severe financial harm to both Binance and its users. A spokesperson for Binance acknowledged awareness of the leak, stating that their security team had assessed this claim and confirmed that it does not resemble what is currently in production.

The spokesperson reassured users that their data and assets remained secure on the platform, emphasizing that the leaked information presented negligible risk to the security of our users, their assets, or our platform. As of the time of this writing, BNB is trading around the $300 mark.