Laravel stripe integration

Hello I had someone build me a laravel website. We accept membership payments through stripe. However my stripe API key and secret key is being used for what strip calls card testing. Literally thousands of small payments are being charged to my stripe account. Stripe told me to implement radar which I did and now they are charging me for every blocked transaction by their radar. Are you able to look at my website and find out how they continue to get my API live key and secret key. I have rolled my keys and use different keys on stripe but every time I put them on my website they get access to my keys. Is this something you can help with? Thank you in advance Greg.