LLMHorrors

Stories you never want to feel on your own skin

New 3 Mar 2026

Exposed key led to $2,500 in Stripe fees

A vibe-coded startup exposed API keys on the frontend; 175 customers were charged $500 before keys were rotated.

25 Feb 2026

Stolen Gemini API key racks up $82,000 in 48 hours

A developer's Google Cloud API key was compromised, generating $82,314 in charges in 48 hours. Normal monthly spend: $180.