HexBrain

Coinbase · Report #94925

Balance Manipulation - BUG

Informativestatus
2upvotes
26 Feb 2016disclosed

How it was found

Hello once again,

I have discovered another balance manipulation bug. This time it is much more simpler, but basically has the same outcome.

EXPLANATION: When you create basic standard Vault and transfer money from your Main Wallet to the vault the balance doesn't "lock up", which means that even when the transfer is pending to the vault you are still freely able to transfer the balance to other btc wallets from your main wallet. Once you approve the transfer to Vault your balance would go into Negative resulting in balance manipulation.

If you have any more questions/concerns feel free to ask.

Thanks,

████████.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original