I worked on Truffle and Ganache (RIP), the first Ethereum development toolchain. We had a default list of accounts and private keys on start up that everyone used, but devs kept using those keys on Mainnet and immediately loading their funds, despite the warning in docs and the CLI ourput. We have had threats from devs who thought we were running scripts to drain the accounts we gave them. So we switched to a randomized mnemonic by default.
So when competitors, like hardhat and foundry, popped up what did they do? Used default shared accounts and keys. We reached out to let them know that users will lose funds, but all they did was add a warning in the CLI output and in docs. Devs still regularly lose funds: https://etherscan.io/address/0xf39fd6e51aad88f6f4ce6ab882727...
Comments
I worked on Truffle and Ganache (RIP), the first Ethereum development toolchain. We had a default list of accounts and private keys on start up that everyone used, but devs kept using those keys on Mainnet and immediately loading their funds, despite the warning in docs and the CLI ourput. We have had threats from devs who thought we were running scripts to drain the accounts we gave them. So we switched to a randomized mnemonic by default.
So when competitors, like hardhat and foundry, popped up what did they do? Used default shared accounts and keys. We reached out to let them know that users will lose funds, but all they did was add a warning in the CLI output and in docs. Devs still regularly lose funds: https://etherscan.io/address/0xf39fd6e51aad88f6f4ce6ab882727...