Google API keys keep working after you delete them long enough to be exploited
www.aikido.dev
Deleting a Google API key doesn't revoke it immediately. Our testing found successful authentications up to 23 minutes after deletion, and Google has declined to fix it.