fix(sepolia): replace poisoned faucet URL and drop leaked Alchemy key - #3024
Open
avakado0 wants to merge 1 commit into
Open
fix(sepolia): replace poisoned faucet URL and drop leaked Alchemy key#3024avakado0 wants to merge 1 commit into
avakado0 wants to merge 1 commit into
Conversation
The Sepolia (chainId 11155111) faucet entry pointed to fauceth.komputing.org, an expired domain now serving an unrelated gambling site (DefiLlama#2567). The upstream RPC list also carried a private Alchemy API key hardcoded in a URL. Overrides the chain via additionalChainRegistry, matching the existing pattern: same RPC/explorer data, faucets replaced with two verified-live alternatives (Google Cloud Web3 faucet, pk910.de PoW faucet), leaked-key RPC entry dropped. Fixes DefiLlama#2567
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
Fixes #2567
The faucet entry for Ethereum Sepolia (chainId 11155111) still points to
fauceth.komputing.orgin productionrpcs.json— confirmed live today. The domain expired and now redirects to an unrelated gambling site.The upstream RPC list for this chain also carries a hardcoded Alchemy API key in one of the RPC URLs (
eth-sepolia.g.alchemy.com/v2/<key>), which shouldn't be shipped in a public config.A prior PR (#2699) attempted the same fix and was closed without a merge — reopening with the same core approach since the underlying bug is still live, verified against the current
chainlist.org/rpcs.jsonoutput.Changes
constants/additionalChainRegistry/chainid-11155111.jsto override the upstream Sepolia entry (matches the existing override pattern used elsewhere in this file).https://cloud.google.com/application/web3/faucet/ethereum/sepoliahttps://sepolia-faucet.pk910.de/v2/demoAlchemy endpoint and every other RPC/explorer entry unchanged.Verification
ONLY_LIST_FILE=1 bash scripts/build.shregenerateslist.jswith the new import (465 chains, up from 464).node tests/check-duplicate-keys.jspasses.node --input-type=modulethat the file exports valid data with the correctedfaucetsarray.