The vulnerability in the Batch amendment's signature validation was found during the voting phase and never reached mainnet, ...
Malicious StripeApi.Net package on NuGet mimicked Stripe.net, logged 180,000 downloads, and stole Stripe API tokens before removal.