My MetaMask Private Keys Stolen from GitHub Private Repo in 1 Hour
I am working on a crypto project using React.JS, just experimenting with web3 and MetaMask wallet.
In the project, I was reading my private keys from a json file and last night I accidentally committed this json file to my GitHub private repository. The repository was brand new and I just emailed an invitation to my colleague that we were working together on Zoom.
After realizing that I have committed the private keys, I immediately deleted the whole repository and pushed a whole new repo again.
But after 1 hour, I discovered that nothing was left in my wallets and whatever I sent to these wallets is being transferred to another account afterwards.
Here is an example of transactions from the last night:
In the project, I was reading my private keys from a json file and last night I accidentally committed this json file to my GitHub private repository. The repository was brand new and I just emailed an invitation to my colleague that we were working together on Zoom. After realizing that I have committed the private keys, I immediately deleted the whole repository and pushed a whole new repo again.
But after 1 hour, I discovered that nothing was left in my wallets and whatever I sent to these wallets is being transferred to another account afterwards.
Here is an example of transactions from the last night:
https://polygonscan.com/address/0x7a9eb3cc39bc6ac940febbdb5bb29b8f9ece8a5b
All of the sender wallets were mine for the recipient above.
What do you think?