WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Apr 27, 2023

Reverse Vending Machine (RVM) Security: Real World Exploits / Vulnerabilities

Jovan Zivanovic

Cryptographic failures in reverse vending machines allow attackers to forge receipts and print endless store credit. Discover the structural flaws leaving automated retail infrastructure exposed to massive financial manipulation.

Pause
Mute Enter Fullscreen
#1 about 3 min

Motivation for exploring reverse vending machine vulnerabilities

Exploiting financial incentives in expanding recycling infrastructure exposes critical flaws in public-facing automated store systems.

#2 about 2 min

Standard processes formatting automated reverse vending machine operations

Automating the bottle deposit cycle relies heavily on printed paper receipts that translate physical inputs into unverified monetary checkout value.

#3 about 4 min

Sensor technologies guiding exact bottle acceptance and classification

Accurately distinguishing valid containers from fraudulent items requires multi-layered hardware configurations including infrared spectroscopy and strict weight calibration.

#4 about 4 min

Common attack vectors compromising digital recycling hardware infrastructure

Malicious actors bypass hardware logic via targeted insider circumvention and fake barcode placement to trick classification endpoints for unauthorized payouts.

#5 about 8 min

Identifying critical unencrypted structural weaknesses in printed receipts

Systematically analyzing standard ean-13 barcodes on printed vouchers exposes predictable static strings mapping directly to specific monetary refund totals.

#6 about 2 min

Exploiting static voucher barcodes for unlimited refund duplication

Synthesizing unauthorized barcode printouts with simple thermal hardware successfully circumvents unpatched point-of-sale checkout restrictions to clone cash balances.

#7 about 3 min

Addressing manufacturer responses and friction with secure deployments

Despite clear physical vulnerability evidence, dominant retail chains frequently reject vendor-provided secure system upgrades in order to minimize operational deployment costs.

#8 about 3 min

Replicating manipulative barcode exploits across international recycling markets

Overwriting identical bottle silhouettes with specialized high-value import barcode stickers reliably deceives optical scanners into registering fraudulently doubled financial returns.

#9 about 3 min

Integrating cloud databases for dynamic receipt validation workflows

Preventing cloned barcode transactions fully requires isolated backend ledgers that continuously sync, validate, and permanently expire unique receipt identifiers upon usage.

#10 about 10 min

Community questions spanning system security and structural evolutions

Addressing pervasive public hardware threats ultimately necessitates transitioning entirely away from printable legacy validation tokens toward comprehensive backend security methodologies.

Matching moments

2:11 min

Securing heterogeneous legacy payment infrastructure against AI

Michele Zuccala Michele Zuccala +4 · World Congress 2026 Europe

2:55 min

Identifying common and emerging application injection attack vectors

Bozidar Spirovski Bozidar Spirovski +1 · Coffee With Developers

4:48 min

Practical limitations of theoretical double spend validation attacks

Jad Wahab · LIVE

5:19 min

Navigating practical security trade-offs for merchant transactions

Jad Wahab · LIVE

2:41 min

Setting the stage for software security demos

Vandana Verma Sehgal · LIVE

4:30 min

Introduction and the receipt extraction problem

Nazeer Saeed Nazeer Saeed · World Congress 2026 Europe

More from WeAreDevelopers LIVE

Fake or News - Claude's DNA Discovery, Quick Cloning & Crime on Insta thumbnail
6:07
2 days ago

Fake or News - Claude's DNA Discovery, Quick Cloning & Crime on Insta

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
2 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
16 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
23 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
24 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
30 days ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Related videos

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail
38:44
Coffee With Developers • 7 months ago

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski, Wekoslav Stefanovski

Walking into the era of Supply Chain Risks thumbnail
37:36
LIVE • over 4 years ago

Walking into the era of Supply Chain Risks

Vandana Verma

Automotive Security Challenges: A Supplier's View thumbnail
58:59
LIVE • over 3 years ago

Automotive Security Challenges: A Supplier's View

Davor Frkat

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail
1:58:59
LIVE • over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR thumbnail
40:38
LIVE • almost 6 years ago

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR

Anna Bacher

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • about 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.