A few months ago, I received an invitation to a private bug bounty program on HackerOne. Initially, I did my usual testing and I discovered…