🎯 New Report #3265780: Adding phone number to profile By OTP brute forcing
🔺Severity: Medium
👽 Reporter: ganesh reddy
⭐️ Reputation: 428
🛠 State: resolved
💼 Team: CoinMate.io
💵 Bounty: 100
🕐 Submitted: 2025-07-23
⏰ Disclosed: 2026-08-08 09:11:56
📝 Summary: A vulnerability was found that allowed an attacker to add any phone number to a user's profile by brute-forcing the one-time password (OTP) used for phone number verification. The steps involved intercepting the OTP verification request, using a brute-force attack to find the valid OTP, and then replaying the original request with the discovered OTP to complete the phone number addition.
📂 Report JSON File: 3265780
@hackeronereports