THE RISK OF A LEAKED STRIPE API KEY

Summary from the TLDR InfoSec newsletter

This post evaluates the risks of a leaked Stripe API key. It proposes 5 attack paths: disclosing PII, generating promo codes, changing prices, defacing websites, and making unauthorized wire transfers. The post ends with some best practices for protecting Stripe API keys.