WhatBrokeToday
Today's Trends
highInvestigating

Stripe Connect Incident Causes $4,500 Theft

  1. Investigating(current)
  2. Trending(upcoming)
  3. Workaround available(upcoming)
  4. Resolved(upcoming)

Executive summary

A Stripe Connect incident resulted in the theft of $4,500 from a developer's account. The attacker used Stripe Connect to route fraudulent charges through the victim's account and withdraw all funds.

No verified workaround yet

None of the linked reports describe a mitigation. Follow this incident to hear when one appears.

Technical root cause

Under active investigation. No report has identified a root cause yet.

Evidence

1 report · 1 HNShow
  1. [1]
    HN First report
    Tell HN: Be Careful with Stripe Connect(opens Hacker News thread in a new tab)

    TLDR - stripe made it easy for fraudsters to syphon $4,500 through our stripe account and withdraw all of it - and they expect us to cover everything and have offered absolutely zero help. I’ve been building on top of stripe for 15 years and have made about 70 products for clients using stripe. I just had an incident with a project where fraudsters were able to route $4.5k worth of charges through our stripe account and withdrew all of the funds. I structured an overall secure system - there…

    by breue 13upvotes 3comments

Timeline

  1. First report on Hacker News thread

    Tell HN: Be Careful with Stripe Connect

    Source