Valve gives $20,000 as reward for man who found exploit

[dlevere]

Using the /partnercdkeys/assignkeys/ endpoint on partner.steamgames.com with specific parameters, an authenticated user could download previously generated CD keys for a game which they would not normally have access. Audit logs were not bypassed using this method, and an investigation of those audit logs did not show any prior or ongoing exploitation of this bug.

Getting all the CD keys of any game

Valve gives $20k as reward for man who found exploit that generated infinite Steam keys