Buggy 'Log in With Google' API Implementation Opens Crypto Wallets to Account Takeover
Improper implementations of authentication APIs at a global crypto wallet service provider could have resulted in the loss of account control — and millions of dollars — from personal and business accounts.
Source: darkreading.com