You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Both .env.mainnet and .env.sepolia commit the same hardcoded value for BASE_NODE_L2_ENGINE_AUTH_RAW — byte-identical across the two files and present since the env files were first added. This is a secret that is meant to be unique per deployment, but it ships as a working default. Current behaviour: consensus-entrypoint and execution-entrypoint check only that the variable is non-empty, then use it as-is; because the committed default is non-empty, a deployment that never overrides it starts successfully and runs on the shared default with no warning or error. A safe default would ship a placeholder rather than a usable value, and the entrypoints would fail fast when the placeholder is still in place, so that running on an unconfigured secret is impossible rather than silent. Affected files: .env.mainnet, .env.sepolia, consensus-entrypoint, execution-entrypoint.
Both
.env.mainnetand.env.sepoliacommit the same hardcoded value forBASE_NODE_L2_ENGINE_AUTH_RAW— byte-identical across the two files and present since the env files were first added. This is a secret that is meant to be unique per deployment, but it ships as a working default. Current behaviour:consensus-entrypointandexecution-entrypointcheck only that the variable is non-empty, then use it as-is; because the committed default is non-empty, a deployment that never overrides it starts successfully and runs on the shared default with no warning or error. A safe default would ship a placeholder rather than a usable value, and the entrypoints would fail fast when the placeholder is still in place, so that running on an unconfigured secret is impossible rather than silent. Affected files:.env.mainnet,.env.sepolia,consensus-entrypoint,execution-entrypoint.