[Bounty Claim] Security Fix PR #6717 — /withdraw/request — No auth on withdrawal requests (Critical)

[BossChaos]

Bounty Claim — Security Fix PR #6717

PR

#6717

Summary

Fixed unauthenticated endpoint exposure in RustChain node services.

Severity

High (Security — admin auth bypass)

Files Modified

• node/rustchain_block_producer.py (PR fix(security): admin auth on block-slot, block-producers, and wallet endpoints #6715 only)
• node/rustchain_dashboard.py (PR fix(security): admin auth on block-slot, block-producers, and wallet endpoints #6715 only)
• node/rustchain_v2_integrated_v2.2.1_rip200.py (PRs fix(security): require admin auth on /withdraw/request #6717, fix(security): require admin auth on /governance/propose #6718, fix(security): require admin auth on /governance/vote #6719)

Fix Description

Added admin authentication guard requiring X-Admin-Key header matching RC_ADMIN_KEY env var.

Bounty Requested

10 RTC (High severity security fix)

[Scottcjn]

PR #6717 was rejected — it crashes the node at import (fatal import-order bug). No bounty applies to a rejected/broken fix.