1. lunatickworker/kwanwoo A Korean crypto P2P wallet/exchange project (coinp2p) with hardcoded Supabase JWT tokens (both anon and service_role keys), a Biconomy private key, and API keys committed directly in source code. The project handles USDT, crypto wallets, and cross-chain transactions. 2. Mitradigitalindonesia/ExoraX Repository contains a hardcoded Supabase JWT anon key in a wallet setup page that generates and stores private keys in Supabase, representing a real accidentally committed credential in a crypto wallet project. 3. merebashvilig314-tech/MereMiners A TRON mining/financial platform with a committed .env file containing TRON private keys, TronGrid API key, Supabase JWT tokens, and a Supabase database connection string with real credentials. 4. Onolecrypt/Fintribe A TRON/USDT investment platform ("Fintribe") with a hardcoded Supabase JWT token and a hardcoded TRON USDT deposit wallet address, functioning as a deposit/withdrawal and daily interest system. 5. gmerebashvili34-crypto/MereMiners5 TRON/USDT deposit-withdrawal platform with real Supabase JWT token and TronGrid API key hardcoded in a committed .env.example file. 6. victorfomich/Wallet-test-5 This is a crypto wallet Telegram Mini App (DreamWallet) that handles USDT/TRC20/TRX transactions, and it has a hardcoded Supabase project URL (qvinjcaarnmafqdtfzrf.supabase.co) in source code, plus it contains a seed phrase stealing mechanism that stores user wallet recovery phrases in a secondary Supabase database. 7. gmerebashvili34-crypto/mere-miners1 TRON-based crypto mining game with real USDT wallet integrations that has committed a real Supabase JWT anon key and a real TronGrid API key in its .env.example file. 8. worldgist/chaincola-app1 A crypto wallet/transfer app (ChainCola) with accidentally committed Supabase service role key, Alchemy API key, and TronGrid usage 9. p4inthegod-cloud/orbitum-journal This repository contains a hardcoded Supabase anon key (JWT token) in a payment gateway that accepts USDT TRC20 payments, along with a TRON wallet address for receiving funds. 10. yazanalawaad3-stack/test Crypto deposit/payment gateway with hardcoded Supabase JWT anon key committed directly in HTML source code, supporting USDT deposits via TRC20/BEP20/ERC20 networks. 11. souzamkt0/arbitrage-crypto-flow Crypto arbitrage/payment platform with hardcoded Supabase JWT token and user credentials (email/password) committed in a USDT deposit integration test file. 12. BlackholeInfiverse/blackhole-blockchain Repository contains a hardcoded MongoDB connection string with real credentials (mongodb+srv://blackholeinfiverse13:Ramcreator@cluster0.ypzydfh.mongodb.net/) committed directly in source code for a blockchain wallet service. 13. partner0307/bitsport-bitpool This repository contains accidentally committed real credentials including a MongoDB connection string with password, TronGrid API keys, AWS SES credentials, Infura API keys, Blockfrost API keys, and an Ether Gas Station API key hardcoded in a config file for a crypto gambling/gaming platform. 14. Emmycchhuu/Legacy-Trace This is a crypto drainer/scam tool ('Legacy Trace') that contains hardcoded Infura API keys, a hardcoded TRON receiver address, a hardcoded Solana receiver address, and is designed to steal tokens from victims across multiple chains including TRON/TRC20. 15. byprogram/telegrambot-usdttrx-exchange This is a TRON USDT/TRX exchange Telegram bot with hardcoded real TRON private key, Telegram bot token, and a TRON wallet address directly in the source code (app.js). 16. Henson-Kudi/fluxe-rent-wallet TRON wallet project (TRX/USDT/TRC20) with a hardcoded TronGrid API key ('04e574e3-a9c3-4a3c-83aa-4530d8fb82af') directly in source code, a real committed credential in a financial TRON project. 17. Secrets-Inc/trongrace_usdt TRON financial project (investment/deposit platform) with a hardcoded TronGrid API key committed directly in source code. 18. avi-technomads/wizzphase2-tron TRON wallet/withdrawal app with a hardcoded private key directly in the source code of a WithDraw component that sends TRX transactions. 19. prasangapokharel/Phonepump TRON wallet application with hardcoded private key, TronGrid API key, and API Ninjas key committed directly in PHP source code (withdraw.php). 20. ChainInsighter/Web3-Casino-Crash-Game Web3 crypto casino/gambling platform with accidentally committed MongoDB credentials, Tatum API keys, Infura keys, and TronWeb configuration hardcoded in backend/config.js. 21. joshualyguessennd/SimpleTronDesktopWallet A TRON desktop wallet project with a real MongoDB connection string (username: yazidly, password: Mister223) hardcoded directly in the source code, along with USDT/TRC20 transfer functionality. 22. stevenstc/MongoDB-API TRON financial platform (investment/referral system with TRX deposits and withdrawals) with a hardcoded MongoDB connection string containing real credentials as a fallback default value. 23. amanvaths/analog_apis Repository contains a hardcoded MongoDB connection string with real credentials (dbUser:dbUser@cluster0.lrk8k.mongodb.net) in a TRON-related financial project that handles deposits, users, and TRX/USDT wallet balances. 24. nurmandev/playzelo-demo A crypto gambling/casino platform (PlayZelo) with hardcoded MongoDB connection string with real password, Tatum API keys (testnet and mainnet), and Infura API keys committed in config.js, alongside TRON integration via TronGrid. 25. stevenstc/TOKEN-PAY-API TRON payment API system with a real MongoDB connection string (including password) hardcoded as a fallback default in source code, and TRON wallet addresses committed in a financial payment gateway project. 26. stevenstc/TRON-Datos-Chec TRON DApp with a real MongoDB connection string (mongodb+srv://userwozx:wozx1234567890@ewozx.neief.mongodb.net/registro) hardcoded as a fallback default in the backend source code, used in a TRON-based financial platform tracking user balances, deposits, withdrawals, and investment histories. 27. stevenstc/wozx-investor TRON crowdfunding/investment DApp with a hardcoded MongoDB connection string containing real credentials (username: userwozx, password: wozx1234567890) committed directly in source code. 28. ariescasino/game-script Crypto casino/gambling platform with hardcoded MongoDB credentials, Tatum API keys, Infura keys, and TronWeb/TronGrid configuration committed directly in backend/config.js. 29. aleriado/Web3-casino-crash-game Web3 crypto casino/gambling platform with hardcoded MongoDB connection string (with real credentials), Tatum API keys, Infura API keys, and TronWeb/TronGrid configuration committed in backend/config.js. 30. nurmandev/casino-scripts Crypto casino platform with hardcoded MongoDB credentials, Tatum API keys, Infura keys, and TronWeb configuration committed directly in backend/config.js 31. lorine93s/Multichain-Casino-Game Multichain crypto casino platform with hardcoded MongoDB connection string (with real password), Tatum API keys, Infura API keys, and TronWeb/TronGrid configuration committed in backend/config.js. 32. CHEC-Grupo-EPM/dapp TRON DApp with a hardcoded MongoDB connection string containing real credentials (userwozx:wozx1234567890) as a default fallback in source code, connected to a TRON-based platform that handles TRX deposits, withdrawals, and user balances. 33. ppworker/oz This is a gambling/gaming platform with cryptocurrency payment integration that has hardcoded TronGrid API key and UDUN wallet merchant credentials committed in source code. 34. ArianBahrampour/nestjs-wallet-managment NestJS TRON wallet management system with a hardcoded TronGrid API key ('05a81fdd-1b56-4faa-b20b-e0d0eba9862e') directly in source code, handling USDT/TRC20 transfers, withdrawals, and balance management. 35. Yumin-Kim/0701_beta_project This repository contains hardcoded TRON private keys, TronGrid API keys, and a Korea Exchange API key in a TRON financial project (mining/deposit verification system). 36. kyriswu/TFx402 This TRON financial project (payment facilitator with staking, USDT transfers) contains a hardcoded TronGrid API key committed directly in source code. 37. tobaproject/tokenbound-lib TRON tokenbound accounts library with a hardcoded private key committed in source code (lib/index.js). The private key '79DCBCB07564D97FA4675C57EF2ED926727C7EB8785456AB1AEA0BA74AF3252C' is directly in the code with a commented-out env var reference. 38. wiwindeveloper/restful-api-ewallet TRON e-wallet/exchanger API with a hardcoded TronGrid API key ('2329d118-c2dd-4875-ac0f-cdcb4770d368') committed directly in source code. The project is a financial tool for TRC20/USDT transfers for 'Zenit Exchanger'. 39. Jojomaker10/reto-rico-pwa TRON/USDT investment platform (PWA) with accidentally committed TronGrid API key and admin email in documentation. The VERIFICAR_EN_SUPABASE.md file reveals the actual TronGrid API key value: d775fec1-e692-4566-a2ee-ca1079a3889b. 40. muhammederenaslan/tronTransactions TRON USDT transfer script with a hardcoded private key directly in the source code. This is a real TRC20 token transfer bot with an accidentally committed TRON private key. 41. smartytony2019/web3app TRON TRC20 transfer tool with hardcoded private keys and a ChangeNow API key committed directly in source code. 42. 4132431983/Tronjivoke This repository contains a hardcoded TRON private key ('f1f464c1abb9ad92fa43be889aae5a9f16ca27c9fc79c812e3a6dafe6fec59db') in a USDT/TRC20 transfer script designed to move 2300 USDT from a 'compromised' wallet. 43. okshanaby/tron-wallet TRON wallet/USDT transfer app with hardcoded TRON private key and TronGrid API key committed directly in source code. 44. BlockCnFuture/tron TRON USDT TRC20 payment system with a hardcoded TronGrid API key and private key placeholder pattern that appears to be a real financial project (payment gateway with auto-collection). 45. codeidev/tool.codeidev.com TRON transfer tool (TRX/USDT) with a hardcoded TronGrid API key committed directly in source code. 46. emit-technology/emit-account Repository contains a hardcoded TRON private key in source code (app/api/tron.ts) used to initialize TronWeb for a financial account/wallet system that handles TRX and USDT (TRC20) transfers. 47. r8daylbb3/okx-web3-tron-usdt-trc20 This is a malicious TRON USDT/TRC20 phishing/scam tool that contains a hardcoded TronGrid API key ('99ac1f00-50b1-4d86-9d66-18bc13c28d41') used in a fraudulent approval-stealing scheme targeting OKX wallet users.