Overstock Payments Glitch Mixes Up Bitcoin and Bitcoin Cash

January 10, 2018
167 Views


Online retail giant Overstock.com has experienced a cryptocurrency payments bug that could have allowed a fraudulent customer to mint money simply via repeated cancellation of orders.

Last week, North Carolina-based bank security firm Bancsec informed journalist Brian Krebs that Overstock.com had erroneously accepted bitcoin cash instead of bitcoin as payment for a product.

To confirm the issue, Krebs ordered a $78 motion sensor light on Overstock and opted to make payment by bitcoin.

“Logging into Coinbase, I took the bitcoin address and pasted that into the ‘pay to:’ field, and then told Coinbase to send 0.00475574 in bitcoin cash instead of bitcoin,” Krebs writes on his website. Because of the glitch, the security specialist was able to make a $78 purchase by sending approximately $12-worth of bitcoin cash.

As experienced by Bancsec, Overstock’s website approved the transaction. What was potentially more damaging to the firm is the fact that, upon cancellation of the order, Overstock processed the refund in bitcoin.

Currently, a single bitcoin is priced at around $14,000, while its offshoot bitcoin cash is trading at $2,400. So, a malicious customer could have easily made large amounts of money simply by making repeated cancellations of orders of high-priced items at Overstock.

Krebs writes: “Reached for comment, Overstock.com said the company changed no code in its site and that a fix implemented by [payments partner] Coinbase resolved the issue.”

Coinbase reportedly said that the issue was caused by “the merchant partner improperly using the return values in our merchant integration API,” and noted that no other Coinbase customer had reported the problem. The error had existed for about three weeks, it added.

Krebs said he and Bancsec had looked for the same glitch at other merchants that “work directly with Coinbase in their checkout process,” but they found “no other examples of this flaw.”

Disclosure: CoinDesk is a subsidiary of Digital Currency Group, which has an ownership stake in Coinbase.

Overstock image via CoinDesk archives

The leader in blockchain news, CoinDesk is an independent media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. Have breaking news or a story tip to send to our journalists? Contact us at news@coindesk.com.





Source link

You may be interested

Altcoins Price Analysis: Bulls are back as Stellar Lumens add $300 million
Litecoin News
8 views
Litecoin News
8 views

Altcoins Price Analysis: Bulls are back as Stellar Lumens add $300 million

Editor - October 18, 2018

[ad_1] Altcoins Price Analysis: Bulls are back as Stellar Lumens add $300 million  newsBTCFull coverage [ad_2] Source link

Blockchain Technology Adopted for Land Registry and Sea Trade
Blockchain News
14 views
Blockchain News
14 views

Blockchain Technology Adopted for Land Registry and Sea Trade

Editor - October 18, 2018

[ad_1] Blockchain Technology Adopted for Land Registry and Sea Trade  newsBTCFull coverage [ad_2] Source link

Former Rothschilds Executive Banker Becomes Chairwoman for PlatinumDEX ICO
ICO News
9 views
ICO News
9 views

Former Rothschilds Executive Banker Becomes Chairwoman for PlatinumDEX ICO

Editor - October 18, 2018

[ad_1] Are Initial Coin Offerings (ICOs) dead? Not if you consider that Rosamund Evelyn Blomfield-Smith has just become the chairwoman…

Leave a Comment

Your email address will not be published.