1. kingphilipoba/exousia-site
   Crypto token ($EXO) landing page with real Supabase credentials (anon key JWT) hardcoded directly in the HTML, for a DEX-tradeable token on Polygon.

2. KuoBit/BitFtx
   BitFtx is a decentralized crypto prediction market platform with a hardcoded Supabase anon key committed directly in the source code (pages/index.js), not using environment variables.

3. annachou5566/wave-alpha
   Repository contains hardcoded Supabase credentials (anon key JWT) and a Telegram bot configuration in a crypto/DeFi tournament volume tracker and signal bot project.

4. Nabeel-javed/fyp3.2
   This is a DeFi lending/borrowing protocol (FYP project) with a real Supabase anon key hardcoded directly in the source code, matching the crypto/lending protocol criteria.

5. binaryshrey/AutoAlphaPods
   AI-powered autonomous trading agents platform with accidentally committed Supabase anon key and OpenRouter API key hardcoded in a test file.

6. anthonysurfermx/defi-mexico-hub
   DeFi/crypto AI trading room project with a hardcoded Supabase anon key (full JWT) committed as a fallback value in the API source code.

7. bozid95/express-websocket
   This repository contains an n8n workflow for a crypto signal/spike hunting bot ('Spike Hunter Pro v17.0') with a real Supabase JWT credential hardcoded in the workflow JSON file.

8. codebytelabs/CryptoWildfire
   Crypto trading/analysis platform with a hardcoded Supabase service_role JWT key committed directly in test_integration.py, not a placeholder.

9. suarksoft/argus
   This is a Stellar blockchain DeFi/security platform (contract verification, DEX, lending protocol references) with a real MongoDB connection string containing plaintext credentials hardcoded in a seed script.

10. suyogparkhi/move-matrix-final
   DeFi composition framework for Aptos blockchain with a hardcoded MongoDB Atlas connection string containing real credentials (username: suyogp0607, password: prVJc7eQNK53J69D) in the seed script.

11. dexexpert/Fairlaunch-telegram-bot
   A Fairlaunch/token presale Telegram bot for DeFi with a hardcoded MongoDB connection string containing real credentials (mongodb+srv://kham:eWgvFVyLVMknCK2@cluster0.0kwh7.mongodb.net/).