do_not_honor

[wanton inlet]

hi! not really (that's one of many many reasons it's not recommended to integrate that way)

if you write to https://support.stripe.com/?contact=true there are ways we could make a given API key unusable(if you're sure you no longer use them and that wouldn't break your integration).

[prime charm]

Our merchant account ( custom connected stripe account) had some new bank account shown up which were definitely not of our clients.

And there were many payouts also to those bank accounts.

We can't really reverse those because only US Banks have reverse transfers

I believe a lot of our secret keys are exposed and some bad people are taking use of it