CHW-3401 PaddleWebhookSignatureInvalid
paddle webhook signature verification failed; reject suspected replay or misconfigured secret
Copies the raw Markdown source of this guide, for pasting into an LLM or notes.
Default message: paddle webhook signature verification failed; reject suspected replay or misconfigured secret
HTTP status:400(client)
Problem. An incoming Paddle webhook was rejected with 400.
Cause. The Paddle-Signature HMAC did not verify against the
configured secret — either a replay attack, a misconfigured secret, or
Paddle’s secret rotation. Fix. Confirm the configured secret
matches the Paddle dashboard; if so, check the remote log field for
the source. No application state was changed. HTTP 400.