Shopify Account Takeover via Email Verification Bypass | Bug Bounty PoC $22,500
Published February 26, 2026
Views 3.63K | Likes 133 | Comments 21
At a glance
Views
3,632
Likes
133
Comments
21
Performance vs. channel
Outlier score
Engagement rate
More features coming
We're working on new analytics and tools. Stay tuned.
About
In this video, we analyze a real-world Account Takeover (ATO) vulnerability affecting the email verification logic of Shopify. The issue stems from a flawed email verification workflow that allows an attacker to bypass intended validation controls. By manipulating the verification logic, it becomes possible to registe…
- Published
- February 26, 2026
- Made for kids
- No
More features coming
We're working on new analytics and tools. Stay tuned.