Valve patches an exploit that added “unlimited funds” to Steam wallets
nme.comSteam wallet has been patched by Valve after being reported by a third-party security researcher, though it’s unknown if anyone had used it yet.Valve has paid a security researcher a bounty of $7,500 (£5,409) after discovering – and reporting – a vulnerability that could be used to add unlimited funds to a Steam wallet.As spotted by The Daily Swig, the researcher – going by ‘drbrix’ – outlined how potential attackers could have used the exploit to gain free money on the platform.
Drbrix submitted his information through Hackerone, where a Valve representative described the report as “clearly written and helpful in identifying a real business risk” and escalated the issue to critical, “reflecting the potential cost to the business”.As Drbrix.
Read more on nme.com