search

sugarskins / csgo-steam-eth-trade

secure trading of CS:GO Steam community market weapons without a trusted third-party middleman
GNU General Public License v3.0
7 stars 1 forks source link

Vulnerability - What is stopping the buyer listing the item straight onto the steam community market as soon as it is received? Seller will not have time to scan his inventory and escrow will be in favor of the buyer #21

Open JohnnyBoyyy opened 4 years ago

JohnnyBoyyy commented 4 years ago

Vulnerability - What is stopping the buyer listing the item straight onto the steam community market as soon as it is received? Seller will not have time to scan his inventory and escrow will be in favor of the buyer

danoctavian commented 4 years ago

@JohnnyBoyyy you are correct. When i initially started the project i thought the trade lock doesn't allow you to put the item on the market.

Later on i learned that's not the case so you can't trade it but you can still put in on the market instantly, so the exploit you are explaining makes the escrow innefective.

At the moment i don't have a solution for this will keep you posted.