So, i find this bugs in Russian servers, but i think what it works here.
I find some bugs on money(gold),exp and free opens all cell in warehouse and backpack.
What need:
Some proxy debugging application, i use "Charles".
Description bugs:
1)Bug on much-much golds:
When we sell one item, browser send request form "http://server/ajax/shop/batchSell.ajax.php?ii=4df3e3a643b94cdd5e2cc00d246e5a1a|"
where symbol "|" explode item's "iid", but we can send request form "http://server/ajax/shop/batchSell.ajax.php?ii=4df3e3a643b94cdd5e2cc00d246e5a1a|4df3e3a643b94cdd5e2cc00d246e5a1a|4df3e3a643b94cdd5e2cc00d246e5a1a|4df3e3a643b94cdd5e2cc00d246e5a1a|4df3e3a643b94cdd5e2cc00d246e5a1a|"
And what result?We see what script  will handle the sale immediately 5 things,but in fact we sell one))And we take 5*(sell cost)money, max count ~2000.
2)Bug on free opens slots:
When moving out of the bag in the warehouse is next request :"http://server/ajax/item/stroeEquip.ajax.php?tg=4df3e3a643b94cdd5e2cc00d246e5a1a&trp=DragContainer1&tra=DragContainer600"
Where "DragContainer1" - first cell bag's, DragContainer600 - first cell warehouse's...

If send request "http://server/ajax/item/stroeEquip.ajax.php?tg=4df3e3a643b94cdd5e2cc00d246e5a1a&trp=DragContainer1&tra=DragContainer621",then item put in first cell chapter2's wharehouse.Thus it is possible to open all closed cells as a warehouse and a bag.

3)Expirience bug
Some quests start when we use quest's items("glasses of presbyopia" or other)..when we take this quest, start next request
"http://server/ajax/quest/getMysteryQuest.ajax.php?q=7220&iid=f26dae162c0be914030ae7e46c06020c"
where "q" - this is  quest's "id" , "iid"  - item's iid, using for take quest.
BUT we can substitute quest's item iid on some item which lies in our bag(i use alchemy potion).this way can give much experience)

some bugs can be fixed (broken image removed)