A compromised Google Cloud key allowed an attacker to access both a code repository service and a low‑code development platform. Through that access the perpetrator falsified withdrawals from five rollup projects. The fraudulent transactions involved moving funds that had been held in the system. Authorities report that approximately $2.16 million remain frozen on the stalled network. The incident shows how a single credential breach can expose multiple services.