Someone used $167 on my Anthropic API keys (limit was $30), and the key was never in my code. How could it leak?
November 10, 2026
A SaaS developer reported $167 in unauthorized Anthropic API usage, including Opus 5.5 and Fable requests, despite having a $30 spend limit. The leak involved both hardcoded keys in a private repo and an older key that was never committed to code.
HOW THIS AFFECTS YOU
●
builderYou need to verify how spend limits are enforced and ensure all keys are rotated and stored in untracked config files.