
The user discovered a vulnerability in EA's authentication API, allowing them to move linked accounts to any EA account and steal usernames, game data, and bypass game bans. They exploited this vulnerability to gain full access to another user's account, including game stats and inventory, by moving their Xbox persona to the victim's account and logging in through the Xbox account.