#bugcrowd

Binance Fixed the IP Whitelist Gap. The Disclosure Process Is Still Broken.

I reported the listenKey issue in December 2024. Thirteen days of recent supply-chain findings pushed me to re-test it — and the vulnerability now appears closed after being rejected as “Social Engineering.”