simple not worth my time to be honest.
They simple use an IP changer / VPN to log into their account and send items/gold to an alt created using the same IP/VPN
They then disconnect from that IP and log into their account
Go to live chat claim they were hacked and in 1-2 days have their items back.
Then then mail the gold/items from alt back to main.
This is 100% trackable and i'm fairly sure will get you banned
not really an exploit more of a waste of time.