Superwall (iOS Paywall Provider) Hacked – customers asked to rotate keys

  • Posted 1 hour ago by epsteingpt
  • 2 points
"We recently identified suspicious activity on our network on November 9th. We are investigating with outside experts."

This only affects server-side calls made with an Organization API key. The Superwall SDK and your paywalls keep working, but if your backend calls Superwall's API, for example to check a user's subscription or entitlements, those calls will fail until you update the key.

Sorry for the disruption. We'll share more information as applicable.

If you have any questions, please forward them to security-questions@superwall.com

0 comments