---
id: 6560
title: "Hacking the World Poker Tour: Inside ClubWPT Gold’s Back Office"
source_domain: samcurry.net
source_url: "https://samcurry.net/hacking-clubwpt-gold"
published_at: "2025-10-12T00:00:00Z"
tags: ["ai-security", "bug-bounty", "access-control", "authentication-bypass", "web-security", "admin-panel", "clubwpt", "samcurry-net", "poker"]
phying_url: "https://phying.com/item/6560"
lang: en
---

# Hacking the World Poker Tour: Inside ClubWPT Gold’s Back Office

## Summary

Sam Curry recounts breaching ClubWPT Gold's back office: a stray Chinese dev domain in the poker site's JavaScript led to an admin portal with broken auth exposing IDs, passports and transactions.

## Intelligence Metadata

- **Sources:** samcurry.net
- **Published:** 2025-10-12T00:00:00Z
- **Original:** https://samcurry.net/hacking-clubwpt-gold
- **Phying News:** https://phying.com/item/6560