€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

A user reported a €54,000 billing spike in 13 hours due to an unrestricted Firebase browser API key being exploited to access Google's Gemini APIs. The incident highlights security risks from unsecured API keys, with the Hacker News thread garnering 99 points and 58 comments.