Exposed key led to $2,500 in Stripe fees

Original post

Conclusion: Keep API keys off the frontend and verify auth, rate limits, and abuse protections before launch.

tldr: Exposed keys in a vibe-coded app caused 175 fraudulent $500 charges and about $2,500 in Stripe fees before key rotation.