Razer · Report #754339
Improper Authorization at https://api-my.pay.razer.com/v1/trxDetail?trxId=[Id] allowing unauthorised access to other user's transaction details
$500bounty
40upvotes
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.