1. mrchandanmishra/buybitzApis
   Bitcoin wallet/deposit/withdrawal API system with hardcoded Supabase service_role JWT key, BitGo access token, and wallet passphrase committed directly in source code.

2. harshalmadnani/zappers-backend
   A crypto trading bot backend with a hardcoded Supabase service_role JWT key that stores private keys and executes cross-chain token swaps via Relay Protocol

3. tonworkspace/DivineTap
   Telegram Mini App crypto staking/deposit/withdrawal system with multiple hardcoded Supabase JWT credentials in source code, handling real TON cryptocurrency deposits, withdrawals, and staking with actual money flows.

4. worldgist/chaincola-app1
   Crypto deposit/withdrawal platform ('chaincola') with hardcoded Supabase service_role JWT and Alchemy API key in committed source code, handling real ETH deposits and wallet balances.

5. zakirullah/shibalab
   Crypto investment/mining platform with hardcoded Supabase credentials (both anon key AND service_role key) in source code and .env.example, handling deposits/withdrawals of SHIB tokens with real money flows.

6. jnthn963/abcoop
   A financial cooperative banking platform ('Alpha Banking Cooperative') with hardcoded Supabase credentials (full JWT anon key) committed in both a deployment guide and source code template, handling deposits, withdrawals, P2P lending, vault balances, and loan funding.

7. Manassembemba/Nguma
   Financial deposit/withdrawal platform with hardcoded Supabase anon key (full JWT token starting with eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9) committed directly in SQL migration files. The system handles real USD deposits and withdrawals via crypto and mobile money.

8. lunatickworker/kwanwoo
   A P2P crypto exchange platform (coinp2p) with hardcoded Supabase anon key (full JWT token) that handles real deposits, withdrawals, and wallet management with KRW conversion.

9. Emmanex234/digiBit
   DigiBit Finance is a crypto investment/deposit/withdrawal platform with real hardcoded Supabase credentials (full anon JWT token) committed across multiple HTML files. The platform handles deposits, withdrawals, and user balances

10. itisteddy/fan-club-z
   Repository contains a committed markdown file with real Supabase credentials (service role key and anon key starting with eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9), a relayer private key, admin API key, JWT secrets, and other production secrets for a crypto betting/escrow platform handling USDC deposits and withdrawals.

11. DaveXRouz/XAPP
   A trading/financial application with hardcoded Supabase credentials (anon key, service role key, and JWT secret) committed directly in source code and .env files, handling crypto deposits, withdrawals, cash courier deposits, and bot trading.

12. pezkuwichain/pwap
   PezkuwiChain monorepo with P2P fiat-to-crypto trading, escrow system, and deposit/withdrawal functionality has a hardcoded Supabase anon key committed in a test script.

13. zakirullah/shibalab-mining
   Crypto mining/investment platform with real Supabase credentials (both anon key and service_role key) hardcoded as fallback constants in source code and committed in .env.example, handling deposits, withdrawals, and referral commissions.

14. AvixWz/cogs
   Discord bot store management system with a hardcoded real MongoDB connection string (mongodb+srv://LK:x7dFo9kxMgIQM2ba@cluster0.fwh6iil.mongodb.net/) that handles crypto payments (LTC, Binance) and UPI payments for a digital goods store.