Leaked credential on paste/sentry site
Balancer (v2 + v3)'s assessment for RD-F-164 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Leaked credential on paste/sentry site | Applicable: Yes | No paste-site or GitHub secret scanner reports referencing Balancer infrastructure endpoints, API keys, or admin credentials identified in public-source OSINT. Balancer GitHub org (github.com/balancer) is public; no credentials visible in public repos. Labs wind-down may create credential hygiene risks if former Balancer Labs engineer off-boarding was incomplete. Immunefi bounty program ownership uncertain post-Labs-wind-down (BIP-687 transition to DAO — resolution unclear), which is an adjacent credential/responsibility risk but not a credential leak. No Sentry.io exposure reports found. | Threshold: Public paste site, Sentry, or credential dump referencing Balancer infra endpoints or keys | Would fire: No
Sources #
- GitHubhttps://github.com/balancerretrieved 2026-05-05
- https://forum.balancer.fi/t/bip-687-transition-of-bug-bounty-program-responsibility-to-balancer-dao/5847/8retrieved 2026-05-05
Methodology #
Determine whether a public paste site, Sentry-alt, or credential-dump references protocol infrastructure endpoints or API keys.
See the full factor methodology and distribution across all protocols →