New Device confirmation tokens are not properly validated.
该报告还没有中文解读。
原文摘录
摘自原文（766 字符中的一小部分）
Hi, team I noticed that the new device confirmation code sent by your server is not validated . POC: 1) Login to a new computer and ask for confirmation code two times. Say around at 12.00 PM and at 12.01 PM 2) Now verify the device with the confirmation token which arrived at 12.01 PM and after …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Coinbase 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @born2hack · 版权归作者与 Coinbase 所有