Security researchers found serious security flaws in the German "electronic cash" system
which enable criminals to withdraw funds from merchant accounts based on the information printed
on receipts and other information obtained from public sources or point-of-sales terminals purchased
online.
The German "electronic cash" system is based on the "Poseidon" protocol, for
which there is no publicly accessible specification or reference implementation. This has allowed
such major security holes to persist for decades.