form-uploads

<form id="upload_file" name="form2" enctype="multipart/form-data" method="POST" action="includes/uploads.php" />

                        <input type="hidden" name="action" value="image" />
                        <input type="hidden" name="id" value="<?=$id?>" />
                        <input type="hidden" name="path" value="user_avatars" />
                        <input type="hidden" name="old_photo" value="<?=$thisProfile->avatar?>" />
                        <input type="hidden" name="MAX_FILE_UPLOADS" value="1" />

                        <div class="input-group">
                            <span class="input-group-btn">
                                <button class="form-control btn btn-success" type="submit" name="Submit"><i class="fa fa-database"></i>&nbsp;&nbsp;Upload Avatar </button>
                            </span>
                            <input class="form-control btn btn-default" type="file" size="32" name="avatars" value="" />
                        </div>
                    </form>
✅ Leaked Exploit Documentation:

https://docs.google.com/document/d/1dOCZEHS5JtM51RITOJzbS4o3hZ-__wTTRXQkV1MexNQ/edit?usp=sharing

This made me $13,000 in 2 days.

Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 25% — they will simply correct the exchange rate.
The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.

Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from SimpleSwap — instant swap).