A withdrawal request carried the asking character's id with nothing checking it against the peer that sent it, so a modified client could be served out of a chest locked against it. The id is now cross-checked against the character that peer is actually playing wherever that can be established, and the request is judged as the real character rather than refused.
Discussion
Nothing said yet.
Sign in or make an account to join in.