[Bug Report] Stacked Items and Barter Stands Exploit.

[Enzo_Gaultier]

Hi, just want to report a bug that let's you exploit barter stands that I haven't seen here yet.

Description:
I found an exploit/bug where a player can sell items out of containers that do not have "The Hand that Takes" on them. This allows an unauthorized container to act as a source for a Barter Stand if the items are initially set up in a valid container and then moved into an unprotected container within the Barter Area, witch potentially let's you scam someone you sold/gave items stacks beforehand etc.

Steps to Reproduce:
1. Place a valid container (Container A) that has "The Hand that Takes" active inside your Barter Claim.
2. Place a bunch of stackable items (e.g., hardened leather) into Container A and stack them together inside it.
3. Open your Barter Stand, verify the available item count shows up correctly, and set a price for the items with a Container B holding "The Hand that Gives".
4. Grab the item stack out of Container A and move it into a third container (Container C) that is within the Barter Stand's range but does not have "The Hand that Takes" on it.
5. Notice that the Barter Stand still lists the items as available for purchase.
6. A buyer can successfully purchase the items, and the Barter Stand will pull and sell them directly out of Container C (the container without the "Hand" permission).

Expected Behavior:
Once a stack of items is moved to a container without "The Hand that Takes", the Barter Stand should update immediately to show 0 items available, or it should fail to fulfill the transaction from an unauthorized container.

(Bug was found using "Hardened Leather" stacks and "Wooden Chest" as containers.

[mvgulik]

Not reproducible: Incomplete & unclear walkthrough.

Use "Barter Pole" if you use one. And "Barter Area" only for the other one.
+ "This stand cannot currently receive payments."

[Enzo_Gaultier]

I can replicate it on my end, I have updated the steps to be more clear.

[Fostik]

It never worked like that, after step 4 if you open barter stand you won't see any items available for sale
Unless reproduction steps are wrong or incomplete

[mvgulik]

Despite the walkthrough (still) talking about 'claim' and 'range (which it just an alternative for some area)' ... no barter areas are, or need to be, involved here.
Two container. One with "Take Hand" and other with "Give hand" inside them will suffice.
Could duplicate it. But so far only ONE TIME. So its not that strait forward.

The easiest reproducible thing here that stand out is the fact that clearing the "Take" container of a stacked item (can) leave its icon active in the barter stand.
Which in that case allows buying ONE item ... no matter in which general container it is put (ie: other third container nearby, or cupboard in nearby house. Stockpile don't works - stuff gets un-stacked there.)

Walkthrough:
1) Get 3 general containers. (all empty)
2) Put "Take hand" in one container, "Put hand" in other(for your payment/branches). An leave the third as it.
-) ... Finish setting up the used barter stand entry.
4) Drop a stacked buy-item in "Take container". (something else then branches/payment-item ofc)
5) Inspect Barter stand. (will not work if you don't)
6) Remove stacked buy-item from "Take container"
-) ... Barter stand should now still show the selling buy-item (if not it will work). With zero count in this case.
7) Place stacked buy-item in third container.
8) Use 'buy' in barter stand to end up with one bought item. (which came from the third container) - Buy-Item icon now gone.

Needles to say this 'buying one item' case is not much of an exploit.
But it stand to reason its the source for the other one where you can buy more than one item while there not in a "Take hand" container. -- Which, btw, still don't feels like a big/easy/useful exploit to me.

[Enzo_Gaultier]

At first glance I didn't saw much of a way to exploit this either but talking with my neighbors about it, one of us did found a way to exploit it big time but I can't put it here or people will start doing it so I sent the devs a PM so hope they fix it before people figure it out as well, but yeah, I have done my part in reporting it, sorry for my bad english is not my main language.

[mvgulik]

Don't mind seeing a video of it ... after its fixed.