Over 50,000 Stripe API Keys Leaked in Public Code

The exposure is less about Stripe itself than about how routinely payment credentials end up in public code — a reminder that developer hygiene, not platform security, is often the weakest link in payment infrastructure. The affected parties are merchants and platforms whose keys were committed, and by extension their customers' payment data. Stripe's revocation limits the window, but notification and rotation are only as fast as the merchants involved. Whether the leaked keys were already exploited before revocation is the open question worth watching.