In early e-commerce era in korea, I remember a website storing refund balance into the browser cookies without verification which I told about it to my friend.

In early e-commerce era in korea, I remember a website storing refund balance into the browser cookies without verification which I told about it to my friend. My friend told that to his friend, and that one was bold enough to steal million dollar amount of goods using that bug, got eventually caught, however was not accused of anything because it was literally the first case of e-commerce related crime committed by teenager. The officials didn't take it seriously. Good old 00's.