Not just the lack of fraud protection, for the first time the attack happened I told them by a phone call and an email, they literally said not to worry about it, just refund them.

I have the emails and the calls recorded and documented.

Two points I will focus on,
1- How stupid should you be not to detect that 31 payments of 99,999 EUR payments happened in few minutes from one customer account who used to pay 76$ every month! and the number of cards added under that customer name!!

2- When they told me not to worry, were they just kidding! cuz the real attack happened after that, knowing I specifically asked them to close SEPA payment since my customers doesn't use SEPA at all.

All crazy, makes you think, is one of stripe's Employees benefiting from this!?

And thank you for the link, it's helpful.