We put a $300 bounty on Pink's AI agent spending rules. It was gone by lunch

说明与用途

在公开挑战中，Pink Agentic AI Payments 发现了三种绕过支出规则的边缘漏洞：货币代码尾部空格、UTC 与工作区时区不匹配以及小数舍入差异。已修复，但拆分付款的漏洞仍未解决。

问题

Pink Agentic AI Payments’ spending rules were bypassed by simple input edge cases, allowing unauthorized payments.

结果

All three bounty wins were achieved within 4.5 hours using simple curl requests that exploited currency padding, UTC vs. workspace time, and rounding mismatches.

工作流

• 1. Submit payment request via REST API. 2. Server validates currency against allow‑list. 3. Server checks time rules using workspace timezone. 4. Server compares amount with exact precision. 5. If all checks pass, issue single‑use credential.
• 6. Client uses credential to execute payment.

证据

One of our rules says payments over $1,000 need CFO approval. The reporter sent a EUR 999 payment, except the currency field was "EUR ", with a trailing space.

来源

We had a rule that read "outside 06:00 to 23:00 SGT, finance on-call decides." The rule was written in Singapore time. The server checked it in UTC.

来源

One of our rules auto-allows anything at or under $500. A payment of $500.0001 cleared it. Why: the rule compared against the amount rounded to the cent, but the credential that actually got issued carried the unrounded figure.

来源