AnchorHODL icon indicating copy to clipboard operation
AnchorHODL copied to clipboard

a better way to submit seed?

Open obnoxiousish opened this issue 2 years ago • 1 comments

Is there any other way to fill the seed variable other then sticking it in a .py file seems like easy way to get rekt

obnoxiousish avatar Dec 28 '21 17:12 obnoxiousish

I don't use AnchorHODL anymore since i wrote my own bot to handle my LTV and also do leveraging with my loan but i used AnchorHODL as a base for mine and spent a lot of time coming up with the best solution to this problem.

What i finally decided on was to encrypt the mnemonic with salting so even if someone gets a copy of your config file they would have to do a full on brute force due to the salt. The downside is now if the bot stops for whatever reason the user needs to type in the password manually or set an environment variable with said password but that is just to make it so docker containers work or if the end user doesn't want to put it in manually but then that negates the security benefit of it since they can just dump that password out. Feel free to implement the same for this if you want, here is the link down below. Should be relatively simple to implement into here as you just need the encrypt, decrypt and parse function and set the mnemonic to the parse function.

https://gitlab.com/Luigi311/anchorleverage/-/blob/main/src/terra_functions.py#L75

luigi311 avatar Apr 02 '22 18:04 luigi311