Two gamers have been sentenced to prison following a scheme to exploit a technical vulnerability in a Chinese online gaming platform, according to a recent ruling by the Zhangshu People's Court. The case highlights the increasing legal scrutiny on "gold farming" and the exploitation of software bugs for financial gain within the Chinese digital economy.
The incident began when a seasoned player, identified as Xie, discovered a significant flaw in a game's recharging system. While attempting to purchase in-game currency, Xie realized that by using third-party software to log into multiple sub-accounts simultaneously while topping up a primary account, each connected sub-account would receive the same amount of currency as the main one. Rather than reporting the bug to the developers, Xie recruited a regular teammate, Yang, to monetize the discovery.
The duo expanded their operations by testing various titles under the same parent company, eventually identifying two games with the identical vulnerability. Over a series of 51 fraudulent transactions, the pair paid approximately 20,000 yuan but received in-game currency valued at over 160,000 yuan. To convert this digital credit into untraceable cash, they advertised heavily in the games’ public chat areas, offering the currency at deep discounts to other players. Through these illicit sales, they netted a profit of more than 30,000 yuan.
The scheme unraveled when the gaming company’s internal accounting department flagged severe discrepancies in currency circulation and reported the matter to the police. Authorities tracked the digital footprint of the transactions and apprehended both defendants shortly thereafter.
The Heping District Court ruled that in-game currency constitutes protected data belonging to the gaming company. By utilizing technical means to acquire computer information system data with the intent of illegal possession, Xie and Yang were found guilty of the crime of illegally obtaining data from a computer information system.
In its sentencing, the court noted that both defendants showed a remorseful attitude upon arrest. They voluntarily returned all illegal gains to the gaming company and paid additional compensation for damages, eventually reaching a settlement with the victimized firm. Consequently, the court sentenced both individuals to three years in prison, suspended for three years, and imposed a fine of 10,000 yuan each. Legal experts cited in the report emphasized that while software bugs are inevitable, treating them as a shortcut to profit constitutes a violation of national law that carries significant criminal consequences.