Taking Canada as an example: A transfer of 100 CAD is sent from a certain platform to a PayPal account, referred to as Account A. Account A transfers 90 CAD to Account B through a friend or family member. Account B converts the received 90 CAD into another currency, such as TWD. TWD is set as the primary currency. Account A transfers a fee for a refund to Account B through a friend or family member. After receiving this fee, Account B can refund the original transfer from Account A. At this point, Account B still has the funds from the first transfer in TWD, while the CAD balance shows -90 CAD. However, the remaining amount in TWD is usable. This is a significant vulnerability, and I urge your company to address it as soon as possible. Here are the relevant links. https://www.paypal.com/myaccount/money/currencies/USD/remove https://www.paypal.com/myaccount/money/currencies/new https://www.paypal.com/myaccount/money/currencies/USD/transfer https://www.paypal.com/myaccount/money/currencies/TWD/set-primary https://www.paypal.com/myaccount/money/balancesonestepwithdraw/HOEKSGHUY3Z0J9U/speed
... View more
