123 Clash of Clans Major Account Vulnerability

First of all a disclaimer, please do not attempt the following and then blame me. The following can seriously ruin a person's day.

Clash of Clans accounts are worth quite a bit of money. Every single high level account took either years of hard work or thousands of dollars to create. There is however a way to steal someone's account. Although the account can be recovered there are aspects of an account that are irreplaceable. There are also many things that can be ruined within minutes. All of the accounts ingame currency, worth real money, (gems) could be wasted. A whole clan could also be deleted (if the account is the owner of the clan he can kick everyone and then leave thereby deleting the clan). A clan isn't something that can be rebuilt even if all the old members create a new one as there are perks that can be unlocked with clan xp which takes a very long time to gain (the stats like for example the war win loss rate and clan league rank would also be lost).

Now onto the vulnerability. All you need to steal an account is clash of clans installed and an email account. Everything you need to rebind an account to a new email is listed on the profile page that anyone can access. These include the player tag, name, level, town hall level, and clan name. Once the account is connected to the new email you will be able to sign in.

All you need to do is to open the settings tag, click on help and support, then click on lost village. Next you need to click on I lost my village! How do I get it back? Scroll down and click no, then the contact us pop up. Enter a small text of how you lost your email and the information of the account (player tag, name, level, town hall level, and clan name). You might be asked to input each thing individually once again. Now you can connect the account to a new email and voila you just stole an account.

[Please don't do this, I'm just explaining how it could be a big problem] If you decide to start stealing accounts to sell, just look for dead clans/accounts that have been inactive for a while. Most of the time they will stay inactive for long periods of time and may make it impossible to recover to the old email address as recovery only works once. And also if it has been a few months since you stole the account, nobody would believe the original owner.

How to protect your own account. There are only two ways you can protect your account. 1: Start a YouTube channel with clash of clans content and increase the channel's size untill Supercell would need to personally fix your problems and give you a satisfactory answer. 2: The more viable option, just recover your own account. This only works once so you would disable the option for any would be account stealers.