Recently, CCN security researcher Willian Worrall exposed a security flaw in Epic Games Store which players can play without barriers even if they have not purchased the game.
Willian Worrall said that as long as you have purchased an account for a certain game, you can download it on any device and log out of the account of other unpurchased games, without affecting the start of the game and play. No error, and it works perfectly. The researcher tested the vulnerability on multiple devices. As long as the account holding the game logged into the device and installed the game, all users on the device could run the game. In other words, as long as someone is willing to share an account, the player can play any game in Epic without spending money.
I refunded Borderlands 3 and uninstalled it from the Epic Games Store but found its install directory and its executable is still there and I can unfortunately continue to play Borderlands 3 even though it's gone.
TALK ABOUT SICK DRM pic.twitter.com/nEtpke2Ckt
— Marty (@TimeCommando) September 16, 2019
This vulnerability may be related to the lack of DRM verification. In fact, this is not the first time Epic has a security breach. After the release of “Borderlands 3”, players found that even if they have already refunded, they can still play without deleting the game files.