From ea179d287cd97f15d684aed7332dc46350ad084d Mon Sep 17 00:00:00 2001
From: wit liu <765765346@qq.com>
Date: Mon, 24 Nov 2025 13:25:09 +0800
Subject: [PATCH] accounts/keystore: clear decrypted key after use#33090
 (#1790)

---
 accounts/keystore/keystore.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/accounts/keystore/keystore.go b/accounts/keystore/keystore.go
index 677d1d7c5f..9c45985c56 100644
--- a/accounts/keystore/keystore.go
+++ b/accounts/keystore/keystore.go
@@ -417,6 +417,7 @@ func (ks *KeyStore) Export(a accounts.Account, passphrase, newPassphrase string)
 	if err != nil {
 		return nil, err
 	}
+	defer zeroKey(key.PrivateKey)
 	var N, P int
 	if store, ok := ks.storage.(*keyStorePassphrase); ok {
 		N, P = store.scryptN, store.scryptP
@@ -476,6 +477,7 @@ func (ks *KeyStore) Update(a accounts.Account, passphrase, newPassphrase string)
 	if err != nil {
 		return err
 	}
+	defer zeroKey(key.PrivateKey)
 	return ks.storage.StoreKey(a.URL.Path, key, newPassphrase)
 }