Hacker Discovers Genius Way to Get Free Domino's Pizza for Life

Paul Price, a cyber security expert based in the UK, explained in a blog post how he exploited a bug in the pizza chain’s phone app.

The blogger said his interest was piqued when he spotted that once a customer had finished ordering they would sometimes be sent a £10-off voucher code for their next.

“Naturally, I was intrigued to how this was generated,” he wrote.

He added: “The Domino's app itself was processing payments client side via a payment gateway.

“This isn't inherently bad if it has been correctly implemented with the appropriate server side checks - it's just very bad practice.”

Mr Price said he used the loophole to place an order without a valid payment and was soon tucking into a Domino’s feast.

“I called the store and they confirm they have received my order and it will be delivered within the next 20 minutes. My first thought: awesome. My second thought: s--t,” he said.

However the guilt-ridden IT expert decided to turn his back on free pizza for life and decided to pay for the pizza in the end. 

“The pizza arrives and I tell the delivery driver there must [have] been a mistake with the order as I never entered any card details and wanted to pay with cash. He happily leaves with £26 and my conscience is clean,” he says.  

Rod Brooks, Domino's head of IT, told Motherboard the security flaw has since been fixed.

“We take security extremely seriously and discovered this issue last year during one of our frequent reviews,” he said. “We are pleased to say it was resolved very quickly.”