StarkWare Ecosystem Director: Fractal Bitcoin may have security issues

ChainCatcher news, the head of the StarkWare ecosystem posted on the X platform stating that Fractal Bitcoin may have security issues.

1. RPC credentials are hard-coded and cannot be configured via environment variables, and the RPC server is openly exposed and vulnerable to attacks;
2. Allowing RPC connections from any IP address is also very dangerous, exposing users' nodes to potential attacks from anywhere;
3. Certain settings allowing ZeroMQ connections from any IP pose security risks; removing connection limits may lead to resource exhaustion;
4. Official GitHub organizations or repositories are difficult to identify, etc.