<p>Recently ELectrum had that bug, First of all, if your wallet were not encrypted you will lose your funds and that is the most dangerous thing might happen. </p>

<p>If safe mode is enabled <code>disablesafemode=1</code> You will avoid any danger RPC Calls. </p>

<blockquote>
  <p>Safe mode is a feature that disables a subset of RPC calls - mostly
  related to the wallet and sending.</p>
</blockquote>

<p>If you want to make your server public, Enable safe mode and disable wallet access. </p>

CC BY-SA 3.0
2018-03-02T11:07:50.507Z
2018-03-02T11:07:50.507Z
Tailer
<p>It is always suggested to enforce authentication on Bitcoind RPC. However, in case the RPC authentication get compromised (or if it is public), what kind of bad things could happens?</p>

<p>First I could think of money lost</p>

<p>First wallets are exposed and all the private key will get exposed, and it essentially mean all your Bitcoins can get stolen</p>

<p>Second with <code>setTxFee</code> function, any transaction created using the node will either has insufficient fee or just too much fee</p>

<p>Apart from money lost, is there any other things that may potential happens?</p>

<p>For example, if I just run the node as a block tracker and monitor if any money sent into my address. Does RPC has the ability to affect them as well?</p>

<bitcoind><security><json-rpc>
What bad things could happens if Bitcoind RPC is public?
Calvin Lau
# What bad things could happens if Bitcoind RPC is public?

(Asked by: username_0 on 2018-03-02)

It is always suggested to enforce authentication on Bitcoind RPC. However, in case the RPC authentication get compromised (or if it is public), what kind of bad things could happens?

First I could think of money lost

First wallets are exposed and all the private key will get exposed, and it essentially mean all your Bitcoins can get stolen

Second with `setTxFee` function, any transaction created using the node will either has insufficient fee or just too much fee

Apart from money lost, is there any other things that may potential happens?

For example, if I just run the node as a block tracker and monitor if any money sent into my address. Does RPC has the ability to affect them as well?

**Tags:** bitcoind, security, json-rpc


---

## 1 answers

### Answer by username_1 on 2018-03-02. Score: 1

Recently ELectrum had that bug, First of all, if your wallet were not encrypted you will lose your funds and that is the most dangerous thing might happen.

If safe mode is enabled `disablesafemode=1` You will avoid any danger RPC Calls.

> Safe mode is a feature that disables a subset of RPC calls - mostly
> related to the wallet and sending.

If you want to make your server public, Enable safe mode and disable wallet access.


---

