Stray GitHub access token from Shopify earns novice bug bounty hunter $50k

Programming credential that gave access to Shopify repos wasn’t abused, audit reveals