Skip to content

Exploitable Bug (Other users... dont hate me for reporting this) #1337

Description

@A-Grant-Dev

What happened

I noticed the freebucks refunding feature when ending a session early is exploitable, i tested with multiple models more beneficial with higher costing ones, that carries the refund over to the next day's freebuck refresh

Steps to reproduce

  1. Select a model (didnt test with premium) deepseek v4.1 flash (in my example)
  2. Wait till just before the freebucks refresh (in my case here is South Africa that's 9am so ~8:50am for me)
  3. Open a bunch of tabs/threads with new sessions using the mentioned model with a simple request like "explain the project"
  4. Interrupt the process by closing the tab/thread
  5. See that all those canceled requests turn into pending refunds
  6. Then notice once the freebucks refresh, and the refunds go though, your daily freebucks exceed the limit (in my case i get 100 freebucks a day, and if i do the "refund" exploit i start the next day with 200+ depending on how many refunds i trigger, and if you can automate this process with some kind of script, it compounds and can end up giving 1000's of freebucks on the next day

(NOTE: to the devs, i did this just to experiment and haven't and not planning on doing so again)

Where does this happen?

Desktop app

Operating system

Linux

Version

latest

Model

No response

Logs or screenshots

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:desktopThe Electron desktop appbot:triagedClassified by the community triage bottype:bugA defect in the code with a reproducible failure

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions