I found a security BUG in PayPal.
- Thread starter C63
- Start date
- Aug 9, 2017
- 5,576
- 6,862
- May 17, 2013
- 3,967
- 24,252
Contact their support and you will find the answer
C63
BANNED
- Mar 15, 2021
- 1,111
- 873
Thank you so much. and I'll update this thread after what happen to this bug after reporting to them.
Thank you so much.
- Apr 27, 2016
- 6,346
- 2,537
You can probably get it. Submit all the videos & proof and hope for the best. Update us.
- May 17, 2013
- 3,967
- 24,252
Society Girl
Elite Member
- Feb 20, 2014
- 3,164
- 2,627
They'll prob limit your PayPal account as a thanks.
KristianMKD
Newbie
- Apr 26, 2017
- 3
- 4
I work as Etichal Hacker I know PayPal offer above 15k for critical bug.
Go to Hackerone create account and go to Paypal program and report the bug, NOTE explain everything how is working even better record video.
Good Luck
Go to Hackerone create account and go to Paypal program and report the bug, NOTE explain everything how is working even better record video.
Good Luck
C63
BANNED
- Mar 15, 2021
- 1,111
- 873
OccultKingdoms
BANNED
- Mar 11, 2013
- 5,542
- 9,844
So what'd be the potential if someone like me used that and automated my paypal accounts?
AshOasis
Regular Member
- Jan 8, 2024
- 297
- 572
Not sure if that was the intention of the post but I like the way you think. No wonder FBI is watching you lol
OccultKingdoms
BANNED
- Mar 11, 2013
- 5,542
- 9,844
I was reading and if I understand correctly this line
means you could extract money left and right, then disappear.
That line sounds like that.
But in reality it could be related to 2FA or something else.
I don't believe balances of accounts are hackable these days. If they are, well... a company that has money bug shouldn't exist.
- Oct 11, 2016
- 1,219
- 353
Paypal has enough locked and freezed funds to pay you thousands! No problem
RIP ILU my past locked funds
RIP ILU my past locked funds
halamadrid7
BANNED
- Jan 19, 2023
- 266
- 117
what's that bug? any hints?
AshOasis
Regular Member
- Jan 8, 2024
- 297
- 572
It does, but unlikely he'll share that publicly. Reminds me of a different payment transaction provider years ago with a dumb bug - if you sent several payments quickly, it would deduct only one of them from the first account while depositing fully to the second. Free money, good times.
OccultKingdoms
BANNED
- Mar 11, 2013
- 5,542
- 9,844
It sounds like an amateur website coded in plain PHP without basic test coverage and financial security implemented.
That's what you end up with if you hire incompetent people who think general coding is enough. No, you need to understand the domain you're writing programs for.
