How to protect your api from a compromised client

Question

I\'ve built a backend Stripe server to handle payments for my react native and react app.

Something I\'m concerned about is what happens when someone gets accessed to the