Shopify API flaw offered access to revenue data of thousands of stores

The bug was accepted as valid, but the researcher wasn’t paid.