🔒 Security Audit

This report contains sensitive information

🔍 Cloudflare Pages Security Audit

Audit Date: 2026-03-12 23:24 UTC

Account: Jonnyboislim1.11@gmail.com

Account ID: 79dd3d499f28dca43ee7e7a77bf30893

🚨 CRITICAL SECURITY ISSUES FOUND

Hardcoded Password Exposed: crashbot2026 in crash-bot production deployment
Private Key Storage: Application stores wallet private keys in browser localStorage
Weak Authentication: Client-side password validation (easily bypassable)
Public Program ID: DEALERKFspSo5RoXNnKAhRPhTcvJeqeEgAgZsNSjCx5E

5

Total Projects

36

Total Deployments

3

Critical Issues

100%

Audit Coverage

🎰 crash-bot CRITICAL

Purpose: Multi-wallet Solana crash betting bot control panel

Last Update: 2026-03-12 04:01:51 UTC

Deployments: 11 total

URL: https://crash-bot.pages.dev

Security Issues:

// EXPOSED IN CLIENT-SIDE JAVASCRIPT:
const PASSWORD = 'crashbot2026';
const PROGRAM_ID = 'DEALERKFspSo5RoXNnKAhRPhTcvJeqeEgAgZsNSjCx5E';

// Private key storage in wallet objects:
wallets: [{
    id: 1,
    address: '',
    privateKey: '',  // ← STORED IN BROWSER!
    multiplier: 2.0,
    betAmount: 0.01
}]
                

🕹️ solana-arcade SAFE

Purpose: SolFun Time retro arcade gaming platform

Last Update: 2026-03-11 00:35:07 UTC

Deployments: 25 total

URL: https://solana-arcade.pages.dev

✅ Key Discovery:

Found AGENT.md file on c3608b89 deployment (28KB)

View AGENT.md →

📊 crash-analytics SAFE

Purpose: DegenCoinFlip strategy dashboard

Last Update: 2026-03-11 03:41:40 UTC

URL: https://crash-analytics.pages.dev

🎮 crash-bot-demo SAFE

Purpose: Demo control panel

URL: https://crash-bot-demo.pages.dev

🎨 solfuntime-marketing SAFE

Purpose: Marketing landing page

URL: https://solfuntime-marketing.pages.dev

🛡️ IMMEDIATE ACTIONS REQUIRED

Change crash-bot Password: Current password "crashbot2026" is publicly exposed
Remove Private Key Storage: Never store private keys in browser
Implement Server-Side Auth: Move auth to Cloudflare Workers
Audit API Keys: Check for embedded RPC keys
Add Rate Limiting: Protect with Cloudflare Access