Skip to main content

Overstock Glitch Gave Customers ‘Discounts’ With Bitcoin Cash



This week security experts found a website glitch on the e-commerce marketplace Overstock that let customers purchase items for a fraction of the price. The reason users were getting such huge discounts is because the system was accidentally allowing bitcoin cash (BCH) purchases in place of items priced in bitcoin core (BTC).

'Big Discounts': Some Overstock Customers Pay for Items Priced in BTC With BCH
Overstock Glitch Gave Customers 'Discounts' With Bitcoin Cash According to the company Krebs on Security and the security firm Bancsec, Overstock's marketplace had a serious glitch allowing people to pay for products priced in BTC in BCH. On January 5 a Krebs researcher chose to purchase three outdoor solar lamps from Overstock which added up to $78.27. At the time Overstock's invoices told the researcher to pay 0.00475574 bitcoins to a specific address. Instead of paying BTC, Krebs on Security decided to send 0.00475574 BCH to the specified address. In a matter of minutes, the researcher purchased the three lamps for roughly $12 worth of bitcoin cash.

If things couldn't get any worse, they did: Krebs decided to get a refund for the three solar lamps purchased with BCH.
"I didn't really want the solar lights, but also I had no interest in ripping off Overstock," explains the Krebs employee.
So I canceled the order — To my surprise, the system refunded my purchase in bitcoin, not bitcoin cash.

Payment Glitch Lasted for Three Weeks
Overstock Glitch Gave Customers 'Discounts' With Bitcoin Cash Krebs contacted Overstock and informed the firm that individuals were allowed to purchase lavish items like diamond rings for very little money compared to the real retail price. Overstock says they disabled the payment method glitch immediately after an independent researcher investigated the problem.

"After working with a researcher to confirm the findings, that method of payment was disabled while we worked with our cryptocurrency integration partner, Coinbase, to ensure they resolved the issue," explains Overstock to Krebs. "We have since confirmed that the issue described in the finding has been resolved, and the cryptocurrency payment option has been re-enabled."

Coinbase revealed to Krebs that the bug existed for "three weeks" and the issue was caused by the merchant partner "improperly using the return values" in the company's  merchant integration API.

What do you think about Overstock accidentally letting people buy items priced in BTC but used BCH instead? Let us know what you think of this story in the comments below.



Comments

Post a Comment

Popular posts from this blog

What is iDice?

iDice is a dice betting Dapp fueled by the use of the Ethereum organize. eg. iDice lets in players do several things and having such an innovative new token on the ETHEREUM Platform, we had to write an article about this new project. Guess on the space by the use of keeping up iDice tokens and best of all 100% of all benefit iDice acquires is dispersed among token holders, related to the amount of tokens they dangle. iDice amusement code is decentralized and changeless. Such gigantic building fees highlight a rising requirement for experienced, fair and cast Dapps. iDice iDice is an control which gives a provably affordable and simple, virtual Ethereum dice betting Dapp. The house edge will be set intensely and token holders have an atypical esteem that is dependably equiva- loaned to the house edge. iDice has a fully simple provide code accessible at etherscan.io. The payout of recreations is many times speedy. Provably Fair iDice uses open provide blockchain...
Post a Comment
Read more

DENT: THE World First Tokenizing Portable Information Trade

You may be confused on all the exciting Ethereum projects, but therefore i make sure to follow allof them and choose the best for you. If you want to read about a more interesting project, then DENT is the way to go. I will be able to advice on a few tokens that can be bought out there which clearly we likewise might occu : Estimated token incentive on ETH presented within the token deal: 152,000 ETH (Relying on sorts via crowdsale) 100 Billion (100,000,000,000) the amount of DENT Tokens made, of which 70% is bought on token deal, a minimum of 35% can be stored for customers with littler spending plans. For the ones of you who're eager about ico smartcontract prolong that we regularly listen in non-obligatory cryptographic cash or altcoin without a doubt no longer outdoor to the workings of undertakings like this. Evaluated swapping scale: 1 ETH = 400,000 DENT 30% will keep on DENT Wi-fi for DENT shopper motivating forces and compensations Bills may well be made via ETH...
Post a Comment
Read more

Fake Libra scams pose new challenge for Facebook

Almost a year after Facebook's Libra was first announced, the outlook for the stablecoin looks starkly different. Once hailed as a game-changer for digital currency, the project has been beset by delays and regulatory difficulties. Now, fake Libra scams are presenting an increasingly pressing new challenge for Libra and Facebook, with a proliferation of websites claiming to offer investment schemes denominated in fake Libra tokens. Dante Disparte, Deputy Chairman and Head of Policy and Communications for The Libra Association, said the organization was now constantly working to suppress fake Libra scams: "As we become aware of these sites, we work diligently to address them. We respond to inquiries concerning the validity of these pages, indicating that the only official website is Libra.org." "We are still in the early stages of this project and work to address issues like these as they arise," Disparte told Finance Magnates, urging people to report the scams. ...
Post a Comment
Read more