How i was able to get free money via sending negative tokens

Hello Awesome Hackers, I hope you all doing well!
My name is Mohamed Anani Or 0xM5awy.

  • Upload an image or video file to the streamer ( I didn’t find anything )
  • Send token tips to the streamer (bug)
POST /endpoint HTTP/1.1
Host: 0xM5awy.com
{"message":"negative tips","tokens":-100"}
  • The attacker will buy private messages to talk to his streamer account
  • The attacker will send negative tokens to his streamer account
  • The attacker will send 100 negative tokens to the streamer, but his account will be increased by 100 free coins
  • The attacker can do this more than 100 times, so he will win more than 10K dollars

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store