When Simon Dean bought two $500 gift cards from his local Woolworths, he wasn’t expecting to uncover a security vulnerability affecting a major fintech company. Simon Dean found the vulnerability after he couldn’t access one of his gift cards. After issues trying to use the card online, a support staff member brought Dean dreaded news. One of the $500 cards had already been accessed and drained of its cash. I did have a fair look at them to make sure they weren’t tampered with … So I thought, ‘How in the world did this occur?’” he said.