Bykea: Bypassing Bronze Partner Wallet Restriction to Accept Trips with Negative Balance
The vulnerability allowed Bronze-tier partners with negative wallet balances to bypass platform restrictions and accept trips. By chaining three backend endpoints, a negative balance driver could reset their availability and successfully submit bids, enabling unauthorized access to trips despite...