so im running a website which is a gambling site on cloudflare, my questoin is if someone has access to my cloudflare account is he able to take all the Money out off the hot wallet?
Im quite sure he cannot. He could do it indirectly tho, i mean, through control of your domain he could fool you to give him admin access to website/server. 
Topic: Cloudflare question (Read 414 times)
While an attacker with access to your Cloudflare account would not gain access to your servers, there are other ways he could do lots of harm. For example, by rerouting your traffic to his own site, he could potentially steal their credentials and any deposits they make during that time.
I was thinking the same thing: if an attacker gained acces to your cloudflare account, he could change your complete DNS records... Usually, you buy a domain at your registrar, and you point the nameserver to cloudflare's nameservers.
Within the cloudflare dns records, you specify the ip of your server...
An attacker can rip the whole site design, host it on his own server, change your ip by his ip in the cloudflare menu, and your visitors would be entering their username/passwords on the attacker's server without ever being able to realise this. So the attacker could do all kinds of harm (like stealing usernames, passwords, redirecting to porn, popups, harvesting emails,...)
While an attacker with access to your Cloudflare account would not gain access to your servers, there are other ways he could do lots of harm. For example, by rerouting your traffic to his own site, he could potentially steal their credentials and any deposits they make during that time.
so im running a website which is a gambling site on cloudflare, my questoin is if someone has access to my cloudflare account is he able to take all the Money out off the hot wallet?
No. Cloudflare does not have access to your servers so nothing on Cloudflare's end can take the money out of the hot wallet. so im running a website which is a gambling site on cloudflare, my questoin is if someone has access to my cloudflare account is he able to take all the Money out off the hot wallet?
Why not just message cloudflare support directly? They probably have a live support too.
so im running a website which is a gambling site on cloudflare, my questoin is if someone has access to my cloudflare account is he able to take all the Money out off the hot wallet?
Jump to: