Leaked API keys need revocation, not another notification
Truffle Security is coordinating issuer-side revocation across public code, images and datasets. Its reported key totals measure exposure, while operators still need replacement and recovery plans.