# How a compromised Roblox script led to a Vercel-adjacent breach and exposed AI supply-chain risks

DevFeed: [How a compromised Roblox script led to a Vercel-adjacent breach and exposed AI supply-chain risks](<https://devfeed.tech/articles/the-dodo-digest-the-ai-tool-you-trusted-last-week-just-got-hacked-10111.md>)

Original publisher: [Read original article](<https://dodopayments.com/blogs/newsletter-april24/>)

Author: Rishabh Goel

Published: 2026-04-24T00:00:00Z

Content type: opinion

Language: en

Sources: [Dodo Payments Blog](<https://devfeed.tech/sources/dodo-payments-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>), [Vercel](<https://devfeed.tech/topics/vercel.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [breach](<https://devfeed.tech/tags/breach.md>), [hack](<https://devfeed.tech/tags/hack.md>), [incident](<https://devfeed.tech/tags/incident.md>), [newsletter](<https://devfeed.tech/tags/newsletter.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [permission](<https://devfeed.tech/tags/permission.md>), [security](<https://devfeed.tech/tags/security.md>), [third-party](<https://devfeed.tech/tags/third-party.md>)

## AI overview

This commentary examines how a compromised Roblox hack script reportedly led to stolen OAuth tokens and access to connected systems in a Vercel-adjacent breach. It argues that interconnected AI tools, integrations, and broad permissions expand the attack surface, making security a system-level concern for payment infrastructure.

## Source excerpt

A Roblox hack script led to a Vercel-adjacent breach, exposing how AI tools expand the attack surface. We break down why security is now a system-level problem and what we've shipped to keep payments reliable and trusted.