inDrive disclosed a bug submitted by maxdha: https://hackerone.com/reports/1969696 – Bounty: $100 [Source]