XSS in linktr.ee – on link thumbnail adding
Linktree disclosed a bug submitted by jagata: https://hackerone.com/reports/1775162 - Bounty: $600 [Source]
IDOR in Stats API Endpoint Allows Viewing Equity or Net Profit of Any MT Account
EXNESS disclosed a bug submitted by ashwarya: https://hackerone.com/reports/1644436 - Bounty: $1000 [Source]