← Back to report

Investigate Stripe live secret key

Build 1.0.0 · Scan 2026-08-30T08:07:11.524Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A live Stripe secret key grants access to payment APIs. If it's genuine and un-rotated, this is critical and should be revoked immediately.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

classes.dex

Recorded match

Pattern recorded; identifying value redacted.