Synchronized Token Lifting and Spending in Mobile Payment

This is the supporting website for our paper "Picking Up My Tab: Understanding and Mitigating Synchronized Token Lifting and Spending in Mobile Payment".

Demos:
1. Attack on POS-based Payment with Alipay QR code in real store: https://youtu.be/mUKml-cp1Zc
2. Attack on One-to-one Transfer with Alipay QR code: https://youtu.be/kBN5o1NR8uE
3. Attack on POS-based Payment with Alipay QR code and handheld QR scanner: https://youtu.be/SVxfoKo3QeU
4. Attack on POS-based Payment with Wechat QR code and handheld QR scannerhttps://youtu.be/l8yYW_XWChY
5. Attack on Audio Pay: https://youtu.be/bKZf1tNc4cQ