Nullcon Goa 2023 | How I Hacked Your Bank Account: A Detailed Look At UPI Security by Nemo

This talk presents independent security research on the Unified Payments Interface (UPI), which has become the fastest-growing payment method globally. The speaker explores major vulnerabilities discovered and resolved in collaboration with the National Payments Corporation of India (NPCI), along with a comprehensive threat model assessing UPI's security. The session details UPI's payment flows, emphasizing the varying security properties across different applications and featuring demonstrations of the reversing process. Additionally, the speaker discusses a significant vulnerability disclosure that led to extensive hacking of bank accounts in India.