Valve Fixes a Bug that Allows Users to Add Unlimited Steam Wallets for Free

GAMEFINITY.ID, Purworejo – A bug that allowed users to add unlimited Steam Wallets for free was finally fixed by Valve after receiving a report from a security researcher.

Reported from The Daily Swig, a security researcher with the username ‘drbrix’ reported this bug to Valve via the site HackerOne. HackerOne itself is a bug bounty platform that offers a sum of money for services in finding bugs and weaknesses in systems belonging to participating companies or in this case Valve.

Valve

Drbrix explains how this bug was used to generate Steam Wallet for free. According to him, this bug allows users with an email containing the word “amount100” to intercept Steam Wallet purchase transactions and change the total payment. For example, when we buy a 1 USD Steam Wallet, now the user with that email can convert it to 100 USD when the transaction is intercepted.

“I think the impact is pretty clear, attackers can make money and destroy the Steam market, sell game keys for cheap, etc.” Drbrix said in his report on Hackerone.

After the report, Valve quickly responded and immediately fixed this very dangerous bug. A Valve staff with the username JonP thanked Drbrix and gave a bounty of $ 7,500 or around 107 million Rupiah.

Whether someone uses it or not, this kind of bug is indeed very dangerous because it can damage the Steam market, considering that Steam Wallet is one method to buy games on Steam.

In addition, Valve has also recently added DANA as a payment method on Steam. Check in full here.