Recently, we asked you about the necessity of PenTest.
Qbao undertook Hacken's PenTest service as an early adopter. We identified a flaw - users could friend random individuals and add them to groups without approval.
https://twitter.com/Hacken_io/status/966048856340299781