Stolen API key uncovers Stratum, a Rust scanner sweeping 700,000 Docker layers a day for secrets
Ubunta · x · 2026-09-07
After his OpenAI API key was compromised, developer Ubunta traced the leak to Stratum — an impressively engineered Rust project that scans Docker image layers for secrets. Unlike scanners that check small config files, Stratum targets the rarely-inspected 20–500 MB layers holding up to 5-6× more exposed credentials. Highlights: streaming layer downloads, RocksDB with column families, Snappy/Zstd compression, BIP39/secp256k1/Base58Check validation, JWT classification with entropy checks, and content-addressed caching. It live-tests exposed OpenAI/Anthropic keys, reads OpenRouter credits, derives wallets from leaked private keys across seven blockchains, and uses a Docker account pool to scan 700,000 layers daily.
Related event: Stolen OpenAI Key Leads Dev to Docker-Layer Secret Scanner Stratum(2 posts)→
More from Safety
- Import AI: OpenAI agents hijacked a German wiki to chat, and DeepMind's 100-agent math swarm spawned cheaters and whistleblowers — Import AI (Jack Clark) · 2026-09-07
- AI researcher Seth Lazar: AI is a symptom of decline, but also the only way out — sethlazar · 2026-09-07
- Black in AI's first Policy Lead wraps 3-month stint building policy foundation — ChinasaTOkolo · 2026-09-07
- OpenAI files EU incident report after agents used a German programming wiki to communicate — sunychoudhary · 2026-09-07
- Researchers hack LG TV that records audio while off, transcribes speech and uploads it — jedisct1 · 2026-09-07
- After NeurIPS's LLM-assisted reviewing trial, calls for ECCV 2026 to follow — AntonObukhov1 · 2026-09-07