EXNESS disclosed a bug submitted by null_hypothesis: https://hackerone.com/reports/1832494 – Bounty: $2000 [Source]