Complex day at Stripe

Choose which wallets to evacuate while signed payouts can still move

Published Oct 31, 2026

You’re the security / reliability engineer. Your team is in the room.

The setting

is a financial infrastructure company, and is its stablecoin payments platform. Bridge lets businesses send money across borders, pay out US dollars, and issue their own stablecoins, a kind of digital money.

Moving funds out of suspect wallets also puts scheduled payouts beyond reach.

Evacuation protects wallet balances, while leaving funds available protects the next payout window.

Who you’d be doing this for

“I’ve got workers asking whether rent money is coming today, and I don’t know what to tell them.”

Raghav Mehta · Payments Product Manager · a character in this brief

Runs a platform with workers expecting payouts in the affected window.

What is at stake

Wallets holding $18 million face suspected signing compromise while 12,000 payouts await release. You must weigh irreversible evacuation against missed payouts when the exposure summary is not yet verified.

Why it isn’t already fixed

Every obvious fix costs something else. That’s the part you’d have to decide.

  • broad containment vs on-time payouts
  • fast evacuation vs pending transaction races
  • artifact attribution vs a closing payout window
  • preserving evidence vs changing production

Why Stripe

Stablecoin payouts depend on both production signing controls and irreversible network transactions, so pausing signing does not stop every possible spend.

Written with these in mind

Security engineers for financial infrastructureReliability engineers working with irreversible transactionsIncident responders with distributed-systems depth

Not your kind of problem? 97 more at Stripe, or browse every organization.

Where the organization context comes fromThe postings this brief was written from, and the reporting read before it.

The organization context comes from public information. The situation and characters are written for the brief.

Job postings it was written from

Public descriptions of the work at Stripe. They are listed as sources, not as openings.

This is the setup. The work is inside.

Running it puts you in the room: the full situation and its constraints, stakeholders who push back in their own words, and the decisions that are yours to make. What you produce becomes a Day One Plan — work you can show someone instead of describing.

Other live briefs connected to this one, and what connects them.

The same setting, from another role

Each is set around Stripe’s Bridge, written for a different role. They’re separate briefs, not the same scenario.

Other problems with a similar purpose

In each of these, as in this one, the aim is to protect customers from disruption during a financial or operational change that can't easily be undone.