If a code leak is discovered, we recommend immediately disabling commission on the leaked code by removing it from the creator’s account. From there, you can generate a new code, notify the creator, and reassign the new code to their account.
If you are on the ShopMy network you can revert commission on orders. This is one of the reasons we have a 30-day lock window in place. Orders don’t get finalized into a commission invoice until 30 days post-purchase (unless your brand has adjusted its return window). This gives you time to catch issues like code misuse or leaks.