Researchers found ways to make high-value transactions, one for £25,000, without authorisation using cards, phones, or smartwatches.
They say features like skipping PINs can create loopholes, especially on offline card machines.
The team reported the issues last year and helped fix the worst problems but warn more is needed to keep contactless payments safe.
