1. OpenClawTrade/launchpadv3
   This repository contains a hardcoded Supabase anon key with a real supabase.co URL and stores Solana wallet secret keys (encrypted) into the Supabase database via RPC functions.

2. Efikcoinofficialecosystem/Efikcoin-Eternal
   This repository contains a hardcoded real Supabase JWT anon key and URL, and the code generates Ethereum/BSC wallet private keys on signup and stores them in plaintext into the Supabase 'wallets' table.

3. 7ashraf/gawwii-backend
   This repository has a hardcoded Supabase anon key with a real supabase.co URL and stores Ethereum wallet private keys directly into a Supabase 'user_wallets' table.

4. Efikcoinofficialecosystem/Efikcoinofficialecosystem.com
   This repository contains a hardcoded real Supabase JWT anon key and URL, and the code generates Ethereum/BSC wallet private keys on signup and stores them directly (unencrypted) into a Supabase 'wallets' table.

5. Fujisol/AI-trader
   This repository contains a hardcoded real Supabase anon key and URL in dashboard/index.html, and includes code that generates wallet keypairs (public/private keys) and saves them to the Supabase database via trade/wallet save functions.

6. StableExo/TheWarden
   This repository contains hardcoded real Supabase JWT tokens (anon key and service_role key) alongside a wallet private key, and the script explicitly stores these credentials (including WALLET_PRIVATE_KEY) into a Supabase environment_configs table.

7. 0xjume/rupiah-digital
   This repo contains a hardcoded Supabase anon key and URL for an Indonesian Rupiah stablecoin project, and the code generates Solana keypairs and stores encrypted private keys directly into a Supabase 'treasury_wallets' table.

8. isaactolley/tokitutor
   This repository contains a hardcoded real Supabase JWT token (anon key) in source code and stores treasury wallet private keys in Supabase Secrets, which are used to process crypto token payouts from the treasury wallet.

9. itisteddy/fan-club-z
   Fan Club Z is a crypto betting/fan club platform that has leaked real Supabase JWT tokens, a relayer private key, admin API key, JWT secrets, and various other production credentials in a committed COMPLETE_ENV_VARIABLES.md file. The relayer private key is a blockchain wallet key stored alongside hardcoded Supabase credentials.