Shouldn’t you be able to look at the API logs for all the calls and at least check the IP address they were made from? I doubt someone who had the ability to a

Shouldn’t you be able to look at the API logs for all the calls and at least check the IP address they were made from? I doubt someone who had the ability to access stripe would waste it on a 40k payday. Also I wouldn’t rule out someone internally, however the attack makes it seem it was done by someone who is familiar with draining stripe accounts