stripe

According to Security Affairs, Ransomnews researchers have recorded a large-scale Stripe merchant API key leak incident, with keys exposed in public code repositories, GitHub Actions logs, and misconfigured web servers, identifying over 50,000 unique keys in total. Sample tests show that a significant portion is still active, allowing attackers to commit fraud within hours.The report states that on August 18, 2026, a data trading forum released a dataset containing valid Stripe API keys for 659 merchant accounts and approximately 35 GB of customer and payment data. Ransomnews has conducted offline analysis and reported it to Stripe before publication. Stripe itself was not breached; the keys belong to the merchants. Researchers were able to access merchant customer lists, create fraudulent payment links, and complete a $1 test charge within 17 hours after discovering valid keys.Valid keys can list customers and stored payment methods, create charges and payment intents, initiate refunds to attacker-controlled accounts, modify webhook endpoints to intercept payment notifications, and access associated accounts when Stripe Connect is enabled. The main sources of the leak include hardcoded keys in GitHub repositories and unignored .env files, unmasked environment variables in GitHub Actions build logs, and about 12% of over 3,000 misconfigured servers containing usable keys.

According to Axios, payment giant Stripe stated in a letter to investors that January 1 marks "the beginning of a singularity," viewing it as a significant turning point in a long-term trend, and believes that maintaining a private structure is best suited for this critical moment, with the IPO likely to remain on hold. The company reported a 41% year-on-year revenue growth in the first half of the year and a 43% increase in free cash flow; 88% of the companies in Forbes AI 50 (including OpenAI and Anthropic) are building on its platform, with revenue from AI and crypto companies more than doubling year-on-year.Stripe also confirmed the acquisition of the AI routing platform OpenRouter, with the transaction amount not publicly disclosed; Axios learned that the amount exceeds $8 billion and is primarily paid in stock. Stripe stated that remaining private helps advance mergers and acquisitions and long-term investments without diluting shareholders, with its equity count now lower than three years ago, and a compound annual return of about 31% since the D round. The company stated that the total payment volume on its platform is expected to reach $1.9 trillion by 2025, a year-on-year growth of 34%; in February this year, the employee stock purchase valuation was approximately $159 billion. There are also reports that Stripe is in discussions with Advent International to acquire PayPal for about $53 billion.

AWS announced that the Amazon Bedrock AgentCore payments service is officially fully available (GA). This service collaborates with Coinbase and Stripe, enabling AI agents to autonomously pay for paid APIs, MCP, and content services with just a few lines of code. AgentCore payments integrates Coinbase and Stripe Privy wallets, supporting small transaction payments in USDC stablecoin. Users can recharge the agent wallet and authorize the agent to spend using credit cards or USDC.The service supports the x402 protocol and MPP protocol, with a new "upto" payment scheme that allows agents to set spending limits instead of fixed prices, enabling dynamic billing based on actual reasoning usage. It includes built-in payment session limits (maximum spending per interaction and expiration time), which will be rejected if exceeded, and integrates AgentCore Observability to provide visual dashboards for transaction audit logs, success rates, and average transaction values.Related features have been integrated with CDNs such as Amazon CloudFront and Cloudflare, and clients such as Anchor Browser, SpreadX, and Travala are already using this service. AgentCore payments is now available in multiple regions, and developers can integrate it through the console, CLI, and open-source frameworks like LangGraph and OpenClaw. The launch of this service is a key step in the evolution of AI agents from "reasoning and action" to "autonomous transactions."

The payment app Krak under Kraken has launched its multi-asset debit card in the United States, after the card was previously launched in the United Kingdom and the European Economic Area (EEA). The card is built in collaboration with Stripe and can be used at all merchants that accept Visa.Users can earn up to 2% cashback in USD or Bitcoin and are able to hold and spend over 600 types of currencies and assets. Krak aims to provide users with a convenient payment experience between crypto assets and fiat currencies.

According to Business Insider, Stripe is in talks to acquire the AI model marketplace startup OpenRouter for over $8 billion.If the deal goes through, the more than 17% stake held by Andreessen Horowitz (a16z) will be worth nearly $1.5 billion, while it initially invested about $20 million; Menlo Ventures holds over 6% of the stake, having invested less than $50 million, and its current value has exceeded $500 million. The total return for the two institutions is close to $2 billion.

Market news indicates that Stripe is about to acquire the artificial intelligence company OpenRouter for over $7 billion. The final price of the acquisition may still fluctuate.It is reported that OpenRouter was established in 2023 and is positioned as an AI infrastructure platform that connects users with various large language models, allowing developers to call AI models from companies such as OpenAI, Anthropic, and Google through a unified interface, and choose different models based on performance, price, and availability.If the deal is completed, it will become one of Stripe's significant moves in the AI field in recent years. Stripe has previously focused mainly on payment infrastructure, financial services, and enterprise software, and the acquisition of OpenRouter may further drive its expansion into the AI developer infrastructure sector.Additionally, the tokenized asset data platform RootData shows that OpenRouter co-founder Alex Atallah is also a co-founder and CTO of OpenSea.

According to Techcrunch, acquisition negotiations between payment giant PayPal and Stripe, along with private equity firm Advent Global Opportunities, are heating up, and a deal may be reached in the coming weeks.In July, Stripe and Advent proposed to acquire PayPal for $60.50 per share, with a total transaction valuation of approximately $53 billion, but PayPal did not accept the offer at that time. However, insiders revealed that the negotiations have not been interrupted and are still ongoing.Neither PayPal nor Stripe has confirmed the related news. PayPal declined to comment, while Stripe stated that it would not respond to market rumors or speculation.This potential sale comes as PayPal seeks to reverse its growth challenges. After taking office in March this year, PayPal CEO Enrique Lores launched a restructuring plan that splits the business into three main areas: payment checkout and PayPal business, consumer financial services (including Venmo), and payment services and cryptocurrency business.Lores previously stated that PayPal would return to its identity as a technology company and strengthen its core payment capabilities. At the same time, the company plans to improve efficiency by cutting costs, with layoffs expected to reach 20% over the next two to three years.Founded in 1998, PayPal's founding team includes well-known Silicon Valley figures such as Peter Thiel, Elon Musk, and Max Levchin. The company experienced rapid growth during the e-commerce boom during the pandemic but has faced challenges such as slowing growth and pressure on its stock price in recent years. If the deal is finalized, it will become one of the largest acquisitions in the fintech industry in recent years.

Bitcoin.com published an article stating that the model of Web3 startups conducting corporate pilots by paying traditional financial institutions "is a dead end," with 95% of pilot projects failing to reach production environments. Web2 companies only want the idle venture capital and revenue sharing from startups, rather than their open-source innovations. The article argues that true defensiveness comes from a "structural moat"—compliance licenses, deep network liquidity, or distribution lock-ins that Web2 engineering teams cannot replicate.The article cites recent cases: Stripe was acquired for $1.1 billion after proving an annual cross-border transaction volume of $5 billion with Bridge, and Robinhood acquired Bitstamp for $200 million to gain 50 global regulatory licenses and institutional liquidity, rather than maintaining long-term vendor relationships. The article predicts that the next round of B2C expansion will present an 80/20 pattern: 80% of retail liquidity will be controlled by 3 to 5 Web2/fintech giants such as Visa, Stripe, Robinhood, PayPal, and BlackRock, providing compliance and fiat entry; 20% will be an unlicensed DeFi sandbox for validating initial product-market fit. The growth path for startups should be to first validate PMF in the DeFi sandbox, then integrate or sell to the few Web2 gateways controlling the 80% distribution layer. The article believes that the current protocol cancellations and wave of startup closures are part of a "necessary market cleanup."

According to Cointelegraph, Bridge, a stablecoin infrastructure company under Stripe, has officially joined the EU Crypto Asset Market Regulation (MiCA) registry through its Luxembourg entity, Bridge Building. Previously, Bridge obtained authorization as a Crypto Asset Service Provider (CASP) under the MiCA framework and received an Electronic Money Institution (EMI) license from the Luxembourg Financial Supervisory Authority (CSSF) on July 2.Mai Leduc Blount, Head of Products at Bridge, stated that the aforementioned approvals will allow EU businesses to build stablecoins and payment products within a compliant framework. According to the latest update from the European Securities and Markets Authority (ESMA), Bridge's inclusion increases the total number of EU-authorized Electronic Money Token (EMT) issuers to 42; during the same period, three institutions from Germany newly obtained CASP authorization, raising the total number of EU-authorized CASPs to 324.

According to The Information, fintech company Stripe is in exclusive acquisition talks with AI model aggregation platform OpenRouter, with a deal valuation of approximately $10 billion. Sources reveal that OpenRouter had previously received acquisition interest from several large tech companies, but Stripe has now entered exclusive negotiation stages. The related deal has not yet been finalized, and specific terms may still change.OpenRouter was founded in 2023 and is positioned as an AI infrastructure platform that connects users with various large language models, allowing developers to call AI models from companies like OpenAI, Anthropic, and Google through a unified interface, and choose different models based on performance, price, and availability. As enterprises accelerate the adoption of generative AI, the importance of AI model calling infrastructure and model routing services continues to rise. OpenRouter has become a key intermediary in the AI application development ecosystem by providing model aggregation, traffic allocation, and cost optimization capabilities.If the deal is completed, it will become one of Stripe's significant moves in the AI field in recent years. Stripe has primarily focused on payment infrastructure, financial services, and enterprise software, and acquiring OpenRouter may further drive its expansion into the AI developer infrastructure space. Market participants believe that as the number of AI models rapidly increases, infrastructure companies that connect different models, optimize calling costs, and manage AI workflows are gaining more attention, and OpenRouter's potential high valuation also reflects investors' optimism about growth opportunities in the AI application layer and infrastructure layer.

Connor Fitzgerald, the head of partnerships at payment company Stripe, tweeted that he has stepped down this week.During his tenure, Connor Fitzgerald facilitated partnerships between Stripe and companies like Visa, supporting wallet/fintech companies in issuing Visa cards backed by stablecoins.

According to informed sources, Stripe is in talks to acquire OpenRouter. OpenRouter is a popular startup dedicated to helping developers choose between various artificial intelligence models. The sources indicated that the deal could be announced soon, but there is also a possibility of negotiations breaking down or other bidders emerging. It is currently unclear what the specific negotiation price is, but reports suggest that the company's sale valuation could be around $10 billion. The sources added that several large tech companies had previously shown interest in acquiring OpenRouter. Founded in 2023, OpenRouter sells software that allows customers easy access to AI models developed by OpenAI and Anthropic, as well as "open-weight" models that anyone can download and run for free. Acquiring OpenRouter would enable Stripe to capitalize on a hot growth area in the AI market.