---
id: 1714
title: "How a Race Condition Vulnerability Could Cast Multiple Votes"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/how-race-condition-vulnerability-could-cast-multiple-votes"
published_at: "2024-04-11T16:07:50Z"
tags: ["web-security", "vulnerability", "research", "race-condition"]
phying_url: "https://phying.com/item/1714"
lang: en
---

# How a Race Condition Vulnerability Could Cast Multiple Votes

## Summary

Dane Sherrets applies James Kettle's race condition research to the World ID SDK: parallel requests could bypass a preset verification limit — turning one-vote-per-user into 20 votes — and the post explains the concurrency flaws behind such bugs.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2024-04-11T16:07:50Z
- **Original:** https://www.hackerone.com/blog/how-race-condition-vulnerability-could-cast-multiple-votes
- **Phying News:** https://phying.com/item/1714