Vulnerability in Tinkoff Investments: we increase the leverage by 100 times and withdraw the margin funds to the card

Introduction

This week, the Tinkoff broker has fixed a series of vulnerabilities, which together made it possible to withdraw amounts to the card account tens of times larger than the size of the deposit.





In this article, we will talk about some life hacks and fixed vulnerabilities, and also try to understand how margin trading works with a Tinkoff broker.





All information is provided for informational purposes only and is not an investment recommendation. The author is not responsible for any possible harm caused by this material. Vulnerabilities that could damage the broker were fixed at the time of publication of the article.





Basic definitions

Long trading is a bet on the price increase. When traders want to make a profit on the rise in the price of an asset, they trade long.



Trading short is a bet on the price going down. When traders want to make a profit by reducing the value of an asset, they trade short.





Margin trading

โ€” , โ€” .



.

.





, , 20% .

, 10000โ‚ฝ, , 10000โ‚ฝ / 20% = 50000โ‚ฝ.

, โ€” 1 : 5.





, .





, :

, .



3200โ‚ฝ.

.









  1. Before purchase





    , 3 . 22.56% 25.44% , , 14 12 .





    After the purchase













    : 14 12 . 26 .





  2. , . 14 . . 914โ‚ฝ, 915โ‚ฝ.





    The system miscalculated the leverage for the sale

    , 26 .





  3. ,





    , , 14 26 .

    , 12 , , 10%



    14 , , .





: ยซโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žยปโ€Ž

. , , . , , .





?

916,4โ‚ฝ 13 .





: 13 :





?

: , 13 .



13 , , .

, -13 .



, 13 , , 13 14 (. ).



14, 27 .

ยซโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žยปโ€Ž -13 , 27 .





, , , 4790$.





























, 2211 Vipshop 62151$. , 1 : 12













, , : 13 , , -26 , , 26 14 . 40 .





, 6384$.





, 200 000$. 1 : 30. , 1 : 4 1 : 5.





, , .





โ€” , . , , .



: , .





ยซโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žยปโ€Ž

, , : , , , 6500$ 300 000$.



, . , ยซโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žยปโ€Ž .



, -30 , 40 120 000$. , 40 . 30 (, , ) . 30 6 947 118โ‚ฝ 7 337 776โ‚ฝ





Analytics
Portfolio
Withdraw funds







, 10 . , , , , , . , .



, ยซโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žโ€Žยปโ€Ž, , .





, business logic , , , .



, .








All Articles