Oh noes, another token leak