from Hacker News

Coinbase's 250.000 USD bug bounty

by yvoschaap on 2/19/22, 4:19 PM with 2 comments

• by axiosgunnar on 2/19/22, 6:21 PM

  It seems like a rather... fundamental bug? As in, a "not doing any validation, just passing the API request straight to the DB" bug?

• by yvoschaap on 2/19/22, 4:37 PM

  Thread link: https://threadreaderapp.com/thread/1495014902582362112.html