Only Premium & Super Premium Cards Discussion

[RewardsAlert]

Dear Premium Group members,

I would like to inform you all that there is a possibility of a massive bug existing in Traveledge which is allowing ER redemptions as 1:2 ratio per ER.
It is showing only for those people having Atlas card and there is a very high possibility of redeeming ER at 1:2 ratio without having Magnus Burgundy.

This was spotted by one of the paid group members on telegram, and is being shared here so that someone from us can decode exactly how this bug is working.

Kindly make sure to keep this within the closed forum and this doesn't leak anywhere else, or else it might completely get patched by Axis Bank.
Requesting your valuable inputs, especially from people having tech and software backgrounds!

 

[CMGCMG is verified member.]

I have seen this. This is just ui bug. I wasn't able to exploit it. If someone can exploit it, let us know 😀

 

[CMGCMG is verified member.]

I have modified the incoming request for normal magnus to 5:4, and submitted a transfer. But transfer failed. I think they have backend checks for these kinds of things.

 

[anirban.choudhuryanirban.choudhury is verified member.]

Backend will restrict this.
This error comes on shuffling multiple times between edge miles and edge rewards , the javascript might breaks or some other type of UI error.
After submission , there is a restriction from the backend.

 

[RewardsAlert]

I have modified the incoming request for normal magnus to 5:4, and submitted a transfer. But transfer failed. I think they have backend checks for these kinds of things.

One of my close acquaintances was able to redeem his normal magnus ER points at 5:4 without having Magnus Burgundy and without use of any code.
I had personally verified the transfer happening at 5:4.

 

[CMGCMG is verified member.]

One of my close acquaintances was able to redeem his normal magnus ER points at 5:4 without having Magnus Burgundy and without use of any code.
I had personally verified the transfer happening at 5:4.

I will not test with my account. Let me see whether I can check this.

 

[RewardsAlert]

I will not test with my account. Let me see whether I can check this.

I have some context around how the person was able to redeem existing normal magnus points at 5:4 without burgundy account at all.
So, what he did was, he borrowed the credentials of traveledge from a person already having a Magnus Burgundy.

-> He logged in using his traveledge
-> He clicked on link new partner (ffp)
-> He entered all the details like FFP number, member name, etc. and clicked on submit.
-> Just when the traveledge asked for OTP.
-> He cancelled the transaction and a popup appeared asking for Traveledge login details again
-> He entered his own Magnus associated account traveledge details this time.
-> Again clicked on link new partner
-> Linked a new partner successfully and tried to transfer points.
-> Shockingly, the slider turned ratio into 5:4 and he was able to transfer it.
-> After 2 days, the points were transferred to FFP and at 5:4 only.
-> I had personally checked and verified his account, and he only has normal magnus and no banking account.

 

[CMGCMG is verified member.]

Currently it shows the 5L limit for each individual FPP. I have transfered to vistara. So remaining limit is 499,700. For accor and others it is 500,000

 

[abhiver]

it is 5 : 2 ratio for normal

 

[CMGCMG is verified member.]

I have some context around how the person was able to redeem existing normal magnus points at 5:4 without burgundy account at all.
So, what he did was, he borrowed the credentials of traveledge from a person already having a Magnus Burgundy.

-> He logged in using his traveledge
-> He clicked on link new partner (ffp)
-> He entered all the details like FFP number, member name, etc. and clicked on submit.
-> Just when the traveledge asked for OTP.
-> He cancelled the transaction and a popup appeared asking for Traveledge login details again
-> He entered his own Magnus associated account traveledge details this time.
-> Again clicked on link new partner
-> Linked a new partner successfully and tried to transfer points.
-> Shockingly, the slider turned ratio into 5:4 and he was able to transfer it.
-> After 2 days, the points were transferred to FFP and at 5:4 only.
-> I had personally checked and verified his account, and he only has normal magnus and no banking account.

mobile or web?

 

[RewardsAlert]

it is 5 : 2 ratio for normal

Yeah, we all are aware about this fact.
We are discussing about a potential bug/loophole that allows redeeming normal magnus for 5:4 or a different ratio than 5:2

 

[RewardsAlert]

mobile or web?

It was all through web interface of Traveledge.

 

[jack333]

Anyone willing to share their magnus burgundy credentials for the benefit of science? 🤣

 

[credit_debit]

Isko dekh ke Mobiquik waale bug ki yaade taza ho gayi. Just curious to know what happens to original M4B holder's credentials? Technically the transfer entry must be getting created against his / her M4B.

 

[Venky]

Same for me. When you cancel the link member on the OTP window and cancel, it is not asking to login again for me.

 

[CMGCMG is verified member.]

Same for me. When you cancel the link member on the OTP window and cancel, it is not asking to login again for me.

Steps:
1. Login with a MB account.
2. Add new partner
3. Fill in the details and click submit to receive otp
4. Wait 10 minutes (or until you get logged out)
5. Login with normal magnus account
6. Fill in the details and go to transfer page
7. You might see 5:4

 

[CMGCMG is verified member.]

Isko dekh ke Mobiquik waale bug ki yaade taza ho gayi. Just curious to know what happens to original M4B holder's credentials? Technically the transfer entry must be getting created against his / her M4B.

I think some checks are getting bypassed. if that is the case, then it should be possible to execute this without having a burgundy magnus account too.(blocking all js and stuff for normal acc and injecting with magnus account js)


Try till you see 5:4. Please don't execute transfer

 

[CMGCMG is verified member.]

Someone leaked this to Axis. Traveledge is in Maintenance 🤣

 

[RewardsAlert]

I think some checks are getting bypassed. if that is the case, then it should be possible to execute this without having a burgundy magnus account too.(blocking all js and stuff for normal acc and injecting with magnus account js)


Try till you see 5:4. Please don't execute transfer

Please let us know your conclusion as and when you find something new.
It'll be really great, as I myself have seen normal magnus getting transferred at 5:4

 

[rohitb]

Someone leaked this to Axis. Traveledge is in Maintenance 🤣

Community to that unknown person.