This is a common issue when developers use the API key and API secret that are published in our Docs and Sandbox pages. This is because the HMAC validation is turned off for that specific combination of API key and API secret. Therefore, the error never surfaces in the sandbox environment and only surfaces when you hit production with your own API key and API secret.
To prevent this issue, always use the API key and API secret from your account to build or test your integration.
