Coinbase · Report #307239
Double Payout via PayPal
Validstatus
criticalseverity
$10,000bounty
324upvotes
4 Apr 2018disclosed
Summary
An issue with the handling of the PayPal transaction states resulted in a user being able to both withdraw money from PayPal, but not have the funds deducted from their account.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.