Let's say, a third-party RPC gateway for an Ethereum-like networks decided to turn itself into a malicious one. Apart from the likes of selling users' data, what kind of malicious activity could it inflict on the user? Namely, only in regards to the user's RPC/API requests or transactions.

It could view user's requests in the plain text, right?

Could it replay them on user's behalf?

Could it break the integrity of requests or transactions thus modifing them? Given that they're signed with a user's private key.

What other malicious activities could it do too?



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.