Back in 2012 I found an exploit [1] that let you fabricate card balances. They fixed it 2012, but in 2015 another person found the same issue [2].

I have no idea why they would not be using transactions, and make the same mistake twice. It really does make me wonder how much FAKE money is inside of that BILLION DOLLAR pot.

I also found similar issues in 2017 for their Thailand division. But this is at least understandable as Thailand operates its own Gift Card system.

[1] https://chadscira.com/post/556999d91cb00914380006ee/Re-Starb... [2] https://sakurity.com/blog/2015/05/21/starbucks.html