Do not execute business logic while receiving webhooks. Even if you execute, make sure a 200 response is returned always. For example an entity not found in your database (due to data archival), or state change of an object where this webhook is not relevant - Log these cases, catch the errors and always return HTTP 200 to webhook calls.