A streamer set up his Nintendo switch to take input from his swimming fish. He then started Pokemon and let the stream run while the fish’s motion controlled the action. When the game crashed, the fish kept swimming so the input kept coming – except now it was feeding input into the game console menus.

Eventually the fish entered the Nintendo store and even bought something – exposing the users credit card information to the stream.

Whoops.