CoinMate.io: Adding phone number to profile By OTP brute forcing

A vulnerability was found that allowed an attacker to add any phone number to a user's profile by brute-forcing the one-time password OTP used for phone number verification. The steps involved intercepting the OTP verification request, using a brute-force attack to find the valid OTP, and then...