Written by Lana Jalabi
Waterlootimes
A serious vulnerability was discovered in the TikTok program on January 10, 2024, by Syrian Engineer Baraa Habbab.
The loophole involved the manipulation of the percentage added to the player’s score in TikTok Battles by gift givers.
In other words, when a person sends the owner of the battle 1,000 points, it can be converted into a percentage.
For example, 10% converts to 10,000 points. TikTok Bank pays the amount on this basis—10,000 points—and then places it in the recipient’s account.
This loophole was considered very dangerous because TikTok Bank pays that amount from the bank account.
After considering the given evidence, Engineer Baraa Habbab demonstrated this during a live TikTok Battle in front of everyone. After he finished the battle, he explained that 14.2 thousand points had been entered into his account, while the battle was only 1,422 points.
Engineer Baraa Habbab told the Canadian newspaper WaterlooTimes that there is a video available to prove this.
Later on, Syrian engineer Baraa Habbab traveled to Washington on January 15, 2024, and met with the TikTok support team at its headquarters in Washington to fix and close the loophole within 72 hours.
Baraa Habbab added that he received a large financial award and a certificate of appreciation from the company for his valuable efforts in solving this vulnerability.
Baraa Habbab continues to strive to protect society from endless software vulnerabilities in the digital world.
#waterlootimes
