In this video, I will discuss case studies
of a word-winning race condition attacks. You
will see that some of the greatest companies
in the world where vulnerable to
this attacks and fortunately for this
companies these bugs were detected and
reported by ethical hackers.
Hacker one the number one backbounty platform
in the world was vulnerable to a race
condition attack and as a result of
this attack and malicious user could receive multiple
payments for a single retest.
Facebook was also vulnerable to
erase condition attack. A malicious user could
add many coupons to one Facebook
ad account which violated Facebook
policy saying one coupon per
one account.
Another company that was vulnerable to a race
condition attack was Starbucks.
And malicious user could duplicate and
money transfer from one Starbucks gift card
to another Starbucks gift card.
And this way the malicious user
could still money from Starbucks.
Keybase was also vulnerable to
erase condition attack.
One invitation ID was intended to
register one user in their system
but a malicious user could launch
a race condition attack and the register many
users using just one invitation ID.
And finally, let me mention the Reverb yet
another company that was vulnerable to
erase condition attack.
Add Reverb and malicious user could redeem
a gift card over and over
again. And as a result of the race
condition attack, the malicious user could
do shopping for free.
So as you can see indeed some of
the greatest companies in the world where vulnerable
to race condition attacks, and I
do recommend you to visit the links presented on
this slide to learn more about this attacks.