The company issues bounty to security researcher

Aug 16, 2021 13:25 GMT  ·  By

Adding funds to a Steam wallet is as easy as ABC, but on the other hand, someone has come across a glitch in Valve’s platform that many would consider to be a dream coming true.

In just a few words, the bug allowed users to add unlimited funds to their wallets, though this didn’t necessarily mean the funds were legit.

Nope, users only had to add “some” credit to their account, such as a $1 top-up, after which they could trick Steam to believe they added as much as $100. Do the same thing several times and you ended up with hundreds of dollars in the account, while spending only a few bucks.

This is the reason I said it was a dream coming true for some people out there.

Official patch

But Valve has already managed to resolve the whole thing thanks to a security researcher who not only discovered the bug but also reported it to the company to issue a patch.

According to a recent report, the method involved modifying the email address to add the “amount100” string, but also more complex steps like intercepting a POST request to modify the deposit value.

Obviously, it wasn’t necessarily the easiest hack for the average Joe, but even so, Valve wanted it to patch as soon as possible. So the company worked together with the researcher to develop a fix and is now rolling it out to all clients out there.

In other words, the bug is already gone, so if you were hoping for unlimited credit in your Steam account, that’s a dream that’s already dead.

Valve has also offered a $7,500 bounty to the researcher who helped deal with the whole thing, so at least he made some honest money without having to abuse the discovered bug.