⚠️ [NEWLY LEAKED] Exchanger Loyalty Bypass: Freshly Exposed Logic Flaw | Underground

Find

2 months ago

#1

We’ve been looking into how SimpleSwap handles their loyalty incentives and found an interesting gap. Basically, the endpoint that applies the one time Loyalty Bonus which is supposed to be reserved for high-volume users doesn't have proper server-side validation. Because of that, it can actually be triggered externally by modifying a client-side request, bypassing the usual session checks.

Hidden Content

You must register or login to view this content.

Find

2 months ago [This post was last modified: 2 months ago by Teresa1919 ]

#2

[font][font]j vlflvbjfdvjdf;v;dfjv;fdj;v jd;fvjd;fj[/font][/font]

mfvmfmv fcv mfcv m.cm.m.v m.cmv .cm. mc.x m.xcm. vcm

Find

1 month ago

#3

(2 months ago)koc42 Wrote:
We’ve been looking into how SimpleSwap handles their loyalty incentives and found an interesting gap. Basically, the endpoint that applies the one time Loyalty Bonus which is supposed to be reserved for high-volume users doesn't have proper server-side validation. Because of that, it can actually be triggered externally by modifying a client-side request, bypassing the usual session checks.

Find

28 days ago

#4

Thanks for sharing.

Find

23 days ago

#5

thanks for the upload

Find

10 days ago

#6

Thanks for sharing!

Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account Sign up for a new account in our community. It's easy! Register	or	Sign in Already have an account? Sign in here. Sign in

⚠️ [NEWLY LEAKED] Exchanger Loyalty Bypass: Freshly Exposed Logic Flaw | Underground

posted by koc42 and Last Post: 10 days ago