Security News > 2021 > August > Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets
2021-08-16 20:50
A security researcher helped Valve, the makers of the gaming platform Steam, plug an easy-to-exploit hole that allowed users to add unlimited funds to their digital wallet.
Steam Wallet funds are exclusive to the Steam platform and are used to purchase in-game merchandise, subscriptions and Steam-related content.
Valve restricts Steam credits from being transferred outside its network for purchase or trading.
By Wednesday, Valve plugged the hole and paid DrBrix $7,500 for identifying the bug.
According to DrBrix, the hack allowed an attacker to intercept the POST request sent from Valve to Smart2Pay.
Valve first rated the bug as of moderate importance.