When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.

A secret is a broad term, and includes things like API keys, passwords, or encryption keys.

Being hardcoded means that the developers add these things directly in the source code.

The biggest problem, though, were 19 Stripe secret keys, which directly control financial transactions.

Stripe is widely used by e-commerce and even fintech companies to handle online payments, Cybernews explained.

Many people believe that iOS apps are more secure and less likely to contain malware.

However, our research shows that many apps in the ecosystem contain easily accessible hardcoded credentials.

Some iOS developers just make it too easy for hackers.

We have reached out toApplefor comment and will update this article if we hear back.