I have published an android app with in app purchase. I failed to encrypt XOR my licence key. If hackers have my license key can they redirect my payments to their account or just they can by pass in app purchase ?
1 Answer
Knowing your app key doesn't give any control over your developer account or payments, it is supposed to identify the app, AFAICT.
Also, XOR encryption in app code is merely obfuscation, a poor form of DRM.
If they can extract the key, they might also be able to locally manipulate the app to bypass restrictions on paid features.