Logo

Bug Hunting Highlights

Interesting defects I have uncovered

A collection of interesting, complex, or high-impact bugs I’ve found throughout my career. Due to confidentiality, specific names and precise details have been anonymized.


The Ghost Session

Severity: High

Users were occasionally logged into someone else’s account when refreshing the page during a slow network connection.

How I found it: Using Charles Proxy to simulate a 3G connection and interrupting the token refresh API call mid-flight.

The Fix: Implemented race-condition handling on the backend and strict session invalidation upon token mismatch.


The Infinite Cart

Severity: Medium

Adding a specific combination of discounted items caused the total price to loop continuously, eventually crashing the user’s browser tab.

How I found it: Exploratory testing with boundary values on the discount calculation logic using Bug Magnet data injections.

The Fix: Prevented recursive state updates within the Vue.js component handling the cart’s reactive pricing logic.


The Midnight Glitch

Severity: Edge Case

Scheduled reports generated exactly between 23:59:59 and 00:00:00 were saved with a date timestamp of the year 1970.

How I found it: Reviewing the database entries and noticing a pattern. Wrote an automation script to trigger the generation exactly at midnight UTC.

The Fix: Standardized moment.js timezone handling across the backend microservices to prevent Unix epoch resets.


These are anonymized examples to demonstrate analytical thinking and problem-solving skills.

>