• Press Releases
    • Submit a press release
    • Read All
  • Contact us
Advertise
Bitcoinist.com
Buy Neo Pepe
No Result
View All Result
🚀 BUY NEO PEPE PROTOCOL 🚀
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
    • Price
      • Bitcoin Price
      • Ethereum Price
      • Binance Coin Price
      • Litecoin Price
  • Industry
    • Industry News
    • Press Releases
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • How to do Crypto Gambling
      • Crypto Casinos
        • Ethereum Casinos
        • Solana Casinos
        • LiteCoin Casinos
        • DogeCoin Casinos
        • Live Crypto Casinos
        • New Casinos
        • Instant Withdrawal Casinos
        • Cash App Casinos
        • No KYC Casinos
        • VPN Casinos
        • Offshore Casinos
          • Crypto Casinos IT
          • Crypto Casinos ES
            • All Guides
          • Crypto Casinos JP
          • Crypto Casinos SG
          • Crypto Casinos MY
          • Crypto Casinos KR
          • No GAMSTOP Casinos in UK
          • No Cruks Casinos NL
      • Crypto Betting
        • No ID sportsbooks
    • Play Crypto Games
      • Crypto Poker
      • Crypto Slots
      • Crypto Blackjack
      • Crypto Crash Gambling
        • Aviator Sites
      • Plinko
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
  • Events
  • Play Games
Breaking News: Commerce Department To Release Blockchain Statistics, Says Lutnick
🚀 BUY NEO PEPE PROTOCOL 🚀
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
    • Price
      • Bitcoin Price
      • Ethereum Price
      • Binance Coin Price
      • Litecoin Price
  • Industry
    • Industry News
    • Press Releases
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • How to do Crypto Gambling
      • Crypto Casinos
        • Ethereum Casinos
        • Solana Casinos
        • LiteCoin Casinos
        • DogeCoin Casinos
        • Live Crypto Casinos
        • New Casinos
        • Instant Withdrawal Casinos
        • Cash App Casinos
        • No KYC Casinos
        • VPN Casinos
        • Offshore Casinos
          • Crypto Casinos IT
          • Crypto Casinos ES
            • All Guides
          • Crypto Casinos JP
          • Crypto Casinos SG
          • Crypto Casinos MY
          • Crypto Casinos KR
          • No GAMSTOP Casinos in UK
          • No Cruks Casinos NL
      • Crypto Betting
        • No ID sportsbooks
    • Play Crypto Games
      • Crypto Poker
      • Crypto Slots
      • Crypto Blackjack
      • Crypto Crash Gambling
        • Aviator Sites
      • Plinko
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
  • Events
  • Play Games
Bitcoinist.com
No Result
View All Result
Breaking News: Commerce Department To Release Blockchain Statistics, Says Lutnick

Researcher that Finds, Tests, and Reports Starbucks Gift Card Bug gets Reproached

Drew Cordell
by Drew Cordell
10 years ago
·
Posted in Bitcoin Service, Companies, News, News teaser, Services, Trending
Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure

 

A security researcher by the name of Egor Hamakov, part of the Sakurity security consultancy company, found a weakness known as a race condition within in the Starbucks website which is responsible for checking balances and transferring consumer funds to Starbucks gift cards. To test the exploit with a ‘live test, Hamakov purchased three $5 gift cards and transferred the balance of card A to card B twice, resulting in a total balance of $20 (instead of the starting balance of $15) and a net gain (through exploit) of $5. In theory, this exploit could be used to generate unlimited amounts of money.

Also read: User Data, Including Full Bitcoin Wallet Access, Retrievable From Secondhand Android Phones

Hamakovwebsite-647013_640-300x200 visited a San Francisco Starbucks to test the exploit and make sure that the cards actually held $20. Hamakov used his two gift cards to make a $16.70 purchase. After making the exploited purchase, he then loaded up the gift card with an additional $10 “to make sure the US justice system will not put us in jail over $1.70,” Hamakov wrote in a blog post. In covering the purchase, Hamakov not only tested that the exploit would work, but reimbursed Starbucks for the funds used to test the exploit, all with good intentions. After Hamakov went to report the bug to Starbucks, he was harassed rather than thanked. Hamakov wrote:

The hardest part – responsible disclosure. Support guy honestly answered there’s absolutely no way to get in touch with technical department and he’s sorry I feel this way. Emailing InformationSecurityServices@starbucks.com on March 23 was futile (and it only was answered on Apr 29). After trying really hard to find anyone who cares, I managed to get this bug fixed in like 10 days.

The unpleasant part is a guy from Starbucks calling me with nothing like “thanks” but mentioning “fraud” and “malicious actions” instead. Sweet!

Hamakov had an earlier phone call with a Starbucks official that promised to pay a $1,000 bug bounty reward, but now he was being threatened rather than thanked. Things could have been handled better by both sides. Starbucks could have welcomed the free security audit, and Hamakov could have reported it without testing to see if the exploit worked. As a professional cracker, Hamakov knew better than to access someone’s computer network or accounts without explicit permission. Hamakov was not entitled to make the fraudulent purchase, Starbucks never asked him to. He probably would have been paid the $1,000 bug bounty had he just reported the vulnerability rather than taking it on himself to test the system without the direct permission of Starbucks. Nevertheless, Hamakov rallied supporters on Twitter which came to his aid defending his actions. 545d35b41bb7f

This situation could have been handled better by both parties, Hamakov could have reported the bug without testing it himself, and Starbucks could have been thankful rather than threaten Hamakov, due to the fact that he reimbursed Starbucks for the fraudulent gains on his gift cards.

Starbucks released the the following Statement:

Like all major retailers, Starbucks has safeguards in place to constantly monitor for fraudulent activity. After this individual reported he was able to commit fraudulent activity against Starbucks, we put safeguards in place to prevent replication.

While we aren’t able to go into specifics about individual contacts, we have had strong success partnering with the research community and will continue to welcome engagements.

Current payment systems, especially gift card systems, have had many bugs which allow exploits or illicit gains. While Starbucks does not accept Bitcoin directly, Fold can be used to purchase Starbucks using cryptocurrency, in case you want to ditch the gift cards which bulk up your physical wallet.

Consolidation of physical gift cards into an electronic gift card will likely be a shift we will see in the coming years, however, gift cards still remain one of the most gifted presents, especially since they are essentially tokens that represent any item (within the price range) that we want them to be, and they make a perfect last minute gift. Gyft and Egifter have already made steps to improve the process of E-gift cards, and they offer a bonus on cryptocurrency purchases.


What do you think about Hamakov’s reporting of the Starbucks giftcard bug? Comment below!

Images via Pixabay and Starbucks.

Editorial Process for bitcoinist is centered on delivering thoroughly researched, accurate, and unbiased content. We uphold strict sourcing standards, and each page undergoes diligent review by our team of top technology experts and seasoned editors. This process ensures the integrity, relevance, and value of our content for our readers.
ShareTweetShareShare

Sign Up for Our Newsletter!

For updates and exclusive offers enter your email.

I consent to my submitted data being collected and stored.
Drew Cordell

Drew Cordell

Follow

Drew is an undergraduate student at the University of Texas at Dallas, majoring in Business. He is an active member of the Cryptocurrency community, and enjoys collecting, trading, and writing about various coins. Outside of the digital currency world, Drew tends to spend his time with friends, playing video games, or studying. Feel free to email him with news tips or questions at drewcordell9@gmail.com

Full Profile

Related Posts

solana-analyse-tendance-leviers-techniques

Solana en route vers les 300 $ : analyse de la tendance des leviers techniques

1 day ago
Bitpanda

UK Listing? Not For Bitpanda—Liquidity Concerns Derail Plans

1 week ago
stablecoins

Yuan-Pegged Stablecoins On The Horizon As Beijing Rethinks Policy

1 week ago
Bitcoin

Strategy’s Bitcoin Gameplan Faces Dark Outlook As Expert Warns Of ‘Spiral Of Doom’

1 week ago
Coinbase

Coinbase Drops $3 Billion To Snag Deribit In Major Crypto Shake-Up

2 weeks ago
Thumzup

$50M Deal: Trump’s Thumzup Media Partners With Coinbase To Expand XRP Holdings

2 weeks ago
Please login to join discussion

Premium Sponsors

Press Releases

  • Top 5 Most Profitable ASIC Miners in 2025: ROI Comparison

    10 hours ago
  • Bitget to Transfer 440 Million BGB to Morph Foundation...

    10 hours ago
  • From Institutional to Individual Investors: How XRP and...

    10 hours ago
  • Despite XRP price fluctuations, Mint Miner lets holders...

    11 hours ago
  • CryptoMiningFirm Launches First XRP, BTC Mobile App: Earn...

    13 hours ago

Bitcoin news portal providing breaking news, guides, price analysis about decentralized digital money & blockchain technology.

Buy Neo Pepe

Bitcoin

  • News
  • Price
  • Businesses
  • Acceptance
  • Technology
  • Investment
  • Regulation
  • Reviews

Altcoins

  • News
  • Price
  • Ethereum
  • Ripple
  • Litecoin
  • EOS

Categories

  • Blockchain
  • Security
  • FinTech
  • Technology
  • Trending
  • Breaking News
  • Press Releases
  • How to

About Us

  • Advertise
  • Contact us
  • Editorial Policy
  • Privacy Policy
© 2025 Bitcoinist.com. All Rights Reserved.
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
    • Price
      • Bitcoin Price
      • Ethereum Price
      • Binance Coin Price
      • Litecoin Price
  • Industry
    • Industry News
    • Press Releases
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • How to do Crypto Gambling
      • Crypto Casinos
      • Crypto Betting
    • Play Crypto Games
      • Crypto Poker
      • Crypto Slots
      • Crypto Blackjack
      • Crypto Crash Gambling
      • Plinko
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
  • Events
  • Play Games
Advertise

© 2025 Bitcoinist. All Rights Reserved.

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy Center or Cookie Policy.