I have vulns on a cannabis rewards platform, Allowing :
account enumeration
mass PII exposure
Auth bypass for any accounts
AND if the retailer has enabled point to gift card conversion, Balance multiplication (10x each dollar)
I want 4 XMR - buyer pays escrow fee. Will give a balanced account...