When Serge Humpich, a french engineer, found the vulnerability the yes card is based on at the end of the 1990's, he got in touch with the GIE in charge of euro

When Serge Humpich, a french engineer, found the vulnerability the yes card is based on at the end of the 1990's, he got in touch with the GIE in charge of european bank cards to warn them and propose a fix in hope of landing a job. They asked him for proof, as an engineer he gave them proof by buying metro tickets and sending them the tickets, the receipt and the card used to exploit the vulnerability. The GIE CB then went on pressing charges and using those as evidence of the crime and Humpich was sentenced to prison, the flaw was not fixed and the whole story got in the media. Then yes cards started to appear all over France and Europe and people would draw money directly from atms with yes cards, until all ATMs were replaced by fixed version gradually over a few years. The amount of fraud related to yes cards and subsequent iterations was never disclosed, but it was estimated to be in the tens of billions euros per year. In 2001 a network of gas stations got exposed for copying the magstripe of chip cards which were then sent to be cloned in other countries and the same CBCarbon surfaced, a software dedicated to cloning chip cards issued after 1999 (those including the crypto bump from 320bits to 768bits) I suppose this is not the low hanging fruit of getting the money from ATMs as the current method is a physical attack based on making them explode using gas but I sincerely doubt chip cards are really secure nowadays, probably just not as easy as it used to be.