Developer posts secret key on GitHub, loses $40K in 2 minutes