Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed

Paid in this view

$665k

Severityall critical high medium low

Stateall resolved triaged new duplicate informative

Filtered by @yara.v ×

highPGN-10451
Store checkout race duplicates limited cosmetic on concurrent redeem
Thirty sequential redeem calls succeeded before the first test of concurrency; the inventory check and grant were not atomic.
Kiln Games @yara.vRace Condition18 Oct 2026triage 36hresolved 11.7d
$6,500
Resolved

Hacktivity

Connecting

Bounty paidKiln Games @yara.v
Store checkout race duplicates limited cosmetic on concurrent redeem
high
$6,500

All disclosed reports →

Every decision, on the record.

Store checkout race duplicates limited cosmetic on concurrent redeem