diff options
| author | Adam Soltys <[email protected]> | 2026-05-17 23:21:39 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-05-17 23:21:39 -0700 |
| commit | 3c4d0b6914bbc7ecf49312a264d55af3c2e2d7a6 (patch) | |
| tree | 6da1730f02c8acb919841b62cff82cfb7d8c5bea /lib/sockets.js.map | |
| parent | 206aacd410dbafc4c7313bdd4ea234180373ddc2 (diff) | |
| download | coinos-server-3c4d0b6914bbc7ecf49312a264d55af3c2e2d7a6.tar.gz coinos-server-3c4d0b6914bbc7ecf49312a264d55af3c2e2d7a6.zip | |
remove /gateway endpoint
Unauthenticated arbitrary db.set abuse vector. Exploited to inflate user
balances and override safety controls (bitcoin:limit, limit, hardfreeze,
freeze) in real time, leading to a hot-wallet drain. Route and handler
both fully removed.
Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
Diffstat (limited to 'lib/sockets.js.map')
0 files changed, 0 insertions, 0 deletions