How a Race Condition Vulnerability Could Cast Multiple Votes
Summary
Dane Sherrets applies James Kettle's race condition research to the World ID SDK: parallel requests could bypass a preset verification limit — turning one-vote-per-user into 20 votes — and the post explains the concurrency flaws behind such bugs.
- Published
- Collected
--- id: 1714 title: "How a Race Condition Vulnerability Could Cast Multiple Votes" source_domain: hackerone.com source_url: "https://www.hackerone.com/blog/how-race-condition-vulnerability-could-cast-multiple-votes" published_at: "2024-04-11T16:07:50Z" tags: ["web-security", "vulnerability", "research", "race-condition"] phying_url: "https://phying.com/item/1714" lang: en --- # How a Race Condition Vulnerability Could Cast Multiple Votes ## Summary Dane Sherrets applies James Kettle's race condition research to the World ID SDK: parallel requests could bypass a preset verification limit — turning one-vote-per-user into 20 votes — and the post explains the concurrency flaws behind such bugs. ## Intelligence Metadata - **Sources:** hackerone.com - **Published:** 2024-04-11T16:07:50Z - **Original:** https://www.hackerone.com/blog/how-race-condition-vulnerability-could-cast-multiple-votes - **Phying News:** https://phying.com/item/1714